CVEvulnerability
CVE-2007-5334
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-16
Description
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute.
Affected configurations
• mozilla firefox (<= 2.0.0.7)
• mozilla seamonkey (<= 1.1.4)
Related
Weakness · not in database (1)
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 h20000.www2.hp.com
- http://secunia.com/advisories/27276 secunia.com
- http://secunia.com/advisories/27298 secunia.com
- http://secunia.com/advisories/27311 secunia.com
- http://secunia.com/advisories/27315 secunia.com
- http://secunia.com/advisories/27325 secunia.com
- http://secunia.com/advisories/27327 secunia.com
- http://secunia.com/advisories/27335 secunia.com
- http://secunia.com/advisories/27336 secunia.com
- http://secunia.com/advisories/27356 secunia.com
- http://secunia.com/advisories/27360 secunia.com
- http://secunia.com/advisories/27383 secunia.com
- http://secunia.com/advisories/27387 secunia.com
- http://secunia.com/advisories/27403 secunia.com
- http://secunia.com/advisories/27414 secunia.com
- http://secunia.com/advisories/27425 secunia.com
- http://secunia.com/advisories/27480 secunia.com
- http://secunia.com/advisories/27665 secunia.com
- http://secunia.com/advisories/27680 secunia.com
- http://secunia.com/advisories/28398 secunia.com
- http://securitytracker.com/id?1018837 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 sunsolve.sun.com
- http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html support.novell.com
- http://www.debian.org/security/2007/dsa-1392 www.debian.org
- http://www.debian.org/security/2007/dsa-1396 www.debian.org
- http://www.debian.org/security/2007/dsa-1401 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml www.gentoo.org
- http://www.kb.cert.org/vuls/id/349217 US Government Resource
- http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 www.mandriva.com
- http://www.mozilla.org/security/announce/2007/mfsa2007-33.html Patch
- http://www.novell.com/linux/security/advisories/2007_57_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-0979.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0980.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0981.html www.redhat.com
- http://www.securityfocus.com/archive/1/482876/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/482925/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/482932/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26132 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-536-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2007/3544 www.vupen.com
- http://www.vupen.com/english/advisories/2007/3587 www.vupen.com
- http://www.vupen.com/english/advisories/2008/0083 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=391043 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37286 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1858 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11482 oval.cisecurity.org
- https://usn.ubuntu.com/535-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html www.redhat.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 h20000.www2.hp.com
- http://secunia.com/advisories/27276 secunia.com
- http://secunia.com/advisories/27298 secunia.com
- http://secunia.com/advisories/27311 secunia.com
- http://secunia.com/advisories/27315 secunia.com
- http://secunia.com/advisories/27325 secunia.com
- http://secunia.com/advisories/27327 secunia.com
- http://secunia.com/advisories/27335 secunia.com
- http://secunia.com/advisories/27336 secunia.com
- http://secunia.com/advisories/27356 secunia.com
- http://secunia.com/advisories/27360 secunia.com
- http://secunia.com/advisories/27383 secunia.com
- http://secunia.com/advisories/27387 secunia.com
- http://secunia.com/advisories/27403 secunia.com
- http://secunia.com/advisories/27414 secunia.com
- http://secunia.com/advisories/27425 secunia.com
- http://secunia.com/advisories/27480 secunia.com
- http://secunia.com/advisories/27665 secunia.com
- http://secunia.com/advisories/27680 secunia.com
- http://secunia.com/advisories/28398 secunia.com
- http://securitytracker.com/id?1018837 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 sunsolve.sun.com
- http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html support.novell.com
- http://www.debian.org/security/2007/dsa-1392 www.debian.org
- http://www.debian.org/security/2007/dsa-1396 www.debian.org
- http://www.debian.org/security/2007/dsa-1401 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml www.gentoo.org
- http://www.kb.cert.org/vuls/id/349217 US Government Resource
- http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 www.mandriva.com
- http://www.mozilla.org/security/announce/2007/mfsa2007-33.html Patch