CVE - CVE-2007-0779

CVE-ID
CVE-2007-0779	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20070226 rPSA-2007-0040-1 firefox URL:http://www.securityfocus.com/archive/1/461336/100/0/threaded BUGTRAQ:20070303 rPSA-2007-0040-3 firefox thunderbird URL:http://www.securityfocus.com/archive/1/461809/100/0/threaded CONFIRM:http://www.mozilla.org/security/announce/2007/mfsa2007-04.html MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=361298 CONFIRM:https://issues.rpath.com/browse/RPL-1081 CONFIRM:https://issues.rpath.com/browse/RPL-1103 FEDORA:FEDORA-2007-281 URL:http://fedoranews.org/cms/node/2713 FEDORA:FEDORA-2007-293 URL:http://fedoranews.org/cms/node/2728 GENTOO:GLSA-200703-04 URL:http://security.gentoo.org/glsa/glsa-200703-04.xml GENTOO:GLSA-200703-08 URL:http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml HP:HPSBUX02153 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 HP:SSRT061181 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 MANDRIVA:MDKSA-2007:050 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 REDHAT:RHSA-2007:0079 URL:http://www.redhat.com/support/errata/RHSA-2007-0079.html REDHAT:RHSA-2007:0077 URL:http://rhn.redhat.com/errata/RHSA-2007-0077.html REDHAT:RHSA-2007:0078 URL:http://www.redhat.com/support/errata/RHSA-2007-0078.html REDHAT:RHSA-2007:0097 URL:http://www.redhat.com/support/errata/RHSA-2007-0097.html REDHAT:RHSA-2007:0108 URL:http://www.redhat.com/support/errata/RHSA-2007-0108.html SGI:20070301-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc SGI:20070202-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc SLACKWARE:SSA:2007-066-03 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 SLACKWARE:SSA:2007-066-05 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 SUSE:SUSE-SA:2007:019 URL:http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html SUSE:SUSE-SA:2007:022 URL:http://www.novell.com/linux/security/advisories/2007_22_mozilla.html UBUNTU:USN-428-1 URL:http://www.ubuntu.com/usn/usn-428-1 BID:22694 URL:http://www.securityfocus.com/bid/22694 OVAL:oval:org.mitre.oval:def:8757 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8757 VUPEN:ADV-2007-0718 URL:http://www.vupen.com/english/advisories/2007/0718 VUPEN:ADV-2008-0083 URL:http://www.vupen.com/english/advisories/2008/0083 OSVDB:32109 URL:http://osvdb.org/32109 SECTRACK:1017700 URL:http://www.securitytracker.com/id?1017700 SECUNIA:24238 URL:http://secunia.com/advisories/24238 SECUNIA:24287 URL:http://secunia.com/advisories/24287 SECUNIA:24290 URL:http://secunia.com/advisories/24290 SECUNIA:24205 URL:http://secunia.com/advisories/24205 SECUNIA:24328 URL:http://secunia.com/advisories/24328 SECUNIA:24333 URL:http://secunia.com/advisories/24333 SECUNIA:24343 URL:http://secunia.com/advisories/24343 SECUNIA:24320 URL:http://secunia.com/advisories/24320 SECUNIA:24293 URL:http://secunia.com/advisories/24293 SECUNIA:24393 URL:http://secunia.com/advisories/24393 SECUNIA:24395 URL:http://secunia.com/advisories/24395 SECUNIA:24384 URL:http://secunia.com/advisories/24384 SECUNIA:24437 URL:http://secunia.com/advisories/24437 SECUNIA:24650 URL:http://secunia.com/advisories/24650 SECUNIA:24455 URL:http://secunia.com/advisories/24455 SECUNIA:24457 URL:http://secunia.com/advisories/24457 SECUNIA:24342 URL:http://secunia.com/advisories/24342
Assigning CNA
N/A
Date Entry Created
20070206	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070206)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org