[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2008-1241Date: (C)2008-03-27   (M)2023-12-22


GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
SECTRACK-1019700
http://www.securityfocus.com/archive/1/490196/100/0/threaded
SUNALERT-238492
BID-28448
SECUNIA-29391
SECUNIA-29526
SECUNIA-29539
SECUNIA-29541
SECUNIA-29547
SECUNIA-29550
SECUNIA-29558
SECUNIA-29560
SECUNIA-29607
SECUNIA-29616
SECUNIA-29645
SECUNIA-30327
SECUNIA-30620
ADV-2008-0998
ADV-2008-1793
DSA-1532
DSA-1534
DSA-1535
GLSA-200805-18
MDVSA-2008:080
RHSA-2008:0207
RHSA-2008:0208
RHSA-2008:0209
SUSE-SA:2008:019
TA08-087A
USN-592-1
firefox-xul-popup-spoofing(41454)
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128
http://www.mozilla.org/security/announce/2008/mfsa2008-19.html
oval:org.mitre.oval:def:11163

CPE    2
cpe:/a:mozilla:seamonkey
cpe:/a:mozilla:firefox
CWE    1
CWE-59
OVAL    4
oval:org.secpod.oval:def:301399
oval:org.mitre.oval:def:7395
oval:org.mitre.oval:def:7869
oval:org.mitre.oval:def:7955
...

© SecPod Technologies