CVEvulnerability
CVE-2007-0779
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-02-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.
Affected configurations
• mozilla firefox 0.8
• mozilla firefox 0.9.1
• mozilla firefox 0.9.2
• mozilla firefox 0.9.3
• mozilla firefox 0.9 rc
• mozilla firefox 0.10
• mozilla firefox 0.10.1
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.6
• mozilla firefox 1.5.8
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.99
References
- ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc patches.sgi.com
- ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc patches.sgi.com
- http://fedoranews.org/cms/node/2713 fedoranews.org
- http://fedoranews.org/cms/node/2728 fedoranews.org
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 h20000.www2.hp.com
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html lists.suse.com
- http://osvdb.org/32109 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2007-0077.html rhn.redhat.com
- http://secunia.com/advisories/24205 Vendor Advisory
- http://secunia.com/advisories/24238 Vendor Advisory
- http://secunia.com/advisories/24287 Vendor Advisory
- http://secunia.com/advisories/24290 Vendor Advisory
- http://secunia.com/advisories/24293 Vendor Advisory
- http://secunia.com/advisories/24320 Vendor Advisory
- http://secunia.com/advisories/24328 Vendor Advisory
- http://secunia.com/advisories/24333 Vendor Advisory
- http://secunia.com/advisories/24342 Vendor Advisory
- http://secunia.com/advisories/24343 Vendor Advisory
- http://secunia.com/advisories/24384 Vendor Advisory
- http://secunia.com/advisories/24393 Vendor Advisory
- http://secunia.com/advisories/24395 Vendor Advisory
- http://secunia.com/advisories/24437 Vendor Advisory
- http://secunia.com/advisories/24455 Vendor Advisory
- http://secunia.com/advisories/24457 Vendor Advisory
- http://secunia.com/advisories/24650 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200703-04.xml security.gentoo.org
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 slackware.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 slackware.com
- http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 www.mandriva.com
- http://www.mozilla.org/security/announce/2007/mfsa2007-04.html Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2007_22_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0078.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0079.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0097.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0108.html www.redhat.com
- http://www.securityfocus.com/archive/1/461336/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/461809/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22694 Patch
- http://www.securitytracker.com/id?1017700 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-428-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2007/0718 www.vupen.com
- http://www.vupen.com/english/advisories/2008/0083 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=361298 bugzilla.mozilla.org
- https://issues.rpath.com/browse/RPL-1081 issues.rpath.com
- https://issues.rpath.com/browse/RPL-1103 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8757 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc patches.sgi.com
- ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc patches.sgi.com
- http://fedoranews.org/cms/node/2713 fedoranews.org
- http://fedoranews.org/cms/node/2728 fedoranews.org
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 h20000.www2.hp.com
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html lists.suse.com
- http://osvdb.org/32109 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2007-0077.html rhn.redhat.com
- http://secunia.com/advisories/24205 Vendor Advisory
- http://secunia.com/advisories/24238 Vendor Advisory
- http://secunia.com/advisories/24287 Vendor Advisory
- http://secunia.com/advisories/24290 Vendor Advisory
- http://secunia.com/advisories/24293 Vendor Advisory
- http://secunia.com/advisories/24320 Vendor Advisory
- http://secunia.com/advisories/24328 Vendor Advisory
- http://secunia.com/advisories/24333 Vendor Advisory
- http://secunia.com/advisories/24342 Vendor Advisory
- http://secunia.com/advisories/24343 Vendor Advisory
- http://secunia.com/advisories/24384 Vendor Advisory
- http://secunia.com/advisories/24393 Vendor Advisory
- http://secunia.com/advisories/24395 Vendor Advisory
- http://secunia.com/advisories/24437 Vendor Advisory
- http://secunia.com/advisories/24455 Vendor Advisory
- http://secunia.com/advisories/24457 Vendor Advisory
- http://secunia.com/advisories/24650 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200703-04.xml security.gentoo.org
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 slackware.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 slackware.com
- http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 www.mandriva.com
- http://www.mozilla.org/security/announce/2007/mfsa2007-04.html Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2007_22_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0078.html www.redhat.com