CVE - CVE-2008-0594

CVE-ID
CVE-2008-0594	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1019342 URL:http://www.securitytracker.com/id?1019342 MISC:20080209 rPSA-2008-0051-1 firefox URL:http://www.securityfocus.com/archive/1/487826/100/0/threaded MISC:20080212 FLEA-2008-0001-1 firefox URL:http://www.securityfocus.com/archive/1/488002/100/0/threaded MISC:238492 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1~~ (Obsolete source) MISC:27683 URL:http://www.securityfocus.com/bid/27683 MISC:28864 URL:http://secunia.com/advisories/28864 MISC:28865 URL:http://secunia.com/advisories/28865 MISC:28877 URL:http://secunia.com/advisories/28877 MISC:28879 URL:http://secunia.com/advisories/28879 MISC:28924 URL:http://secunia.com/advisories/28924 MISC:28939 URL:http://secunia.com/advisories/28939 MISC:28958 URL:http://secunia.com/advisories/28958 MISC:29086 URL:http://secunia.com/advisories/29086 MISC:29567 URL:http://secunia.com/advisories/29567 MISC:30327 URL:http://secunia.com/advisories/30327 MISC:30620 URL:http://secunia.com/advisories/30620 MISC:ADV-2008-0453 URL:~~http://www.vupen.com/english/advisories/2008/0453/references~~ (Obsolete source) MISC:ADV-2008-0627 URL:~~http://www.vupen.com/english/advisories/2008/0627/references~~ (Obsolete source) MISC:ADV-2008-1793 URL:~~http://www.vupen.com/english/advisories/2008/1793/references~~ (Obsolete source) MISC:DSA-1484 URL:http://www.debian.org/security/2008/dsa-1484 MISC:DSA-1485 URL:http://www.debian.org/security/2008/dsa-1485 MISC:DSA-1489 URL:http://www.debian.org/security/2008/dsa-1489 MISC:DSA-1506 URL:http://www.debian.org/security/2008/dsa-1506 MISC:FEDORA-2008-1435 URL:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html MISC:FEDORA-2008-1535 URL:https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html MISC:GLSA-200805-18 URL:http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml MISC:MDVSA-2008:048 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2008:048~~ (Obsolete source) MISC:SUSE-SA:2008:008 URL:http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html MISC:USN-576-1 URL:http://www.ubuntu.com/usn/usn-576-1 MISC:http://browser.netscape.com/releasenotes/ URL:http://browser.netscape.com/releasenotes/ MISC:http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html URL:http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html MISC:http://wiki.rpath.com/Advisories:rPSA-2008-0051 URL:http://wiki.rpath.com/Advisories:rPSA-2008-0051 MISC:http://www.mozilla.org/security/announce/2008/mfsa2008-11.html URL:http://www.mozilla.org/security/announce/2008/mfsa2008-11.html MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=408164 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=408164
Assigning CNA
Red Hat, Inc.
Date Record Created
20080205	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20080205)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)