Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox | Mozilla | 1.5 (including) | 1.5.0.2 (excluding) |
| Seamonkey | Mozilla | * | 1.0.1 (excluding) |
| Firefox | Ubuntu | dapper | * |
| Firefox | Ubuntu | edgy | * |
| Firefox | Ubuntu | feisty | * |
| Firefox-granparadiso | Ubuntu | devel | * |
| Lightning-sunbird | Ubuntu | devel | * |
| Midbrowser | Ubuntu | devel | * |
| Xulrunner | Ubuntu | devel | * |
| Xulrunner | Ubuntu | edgy | * |
| Xulrunner | Ubuntu | feisty | * |
References
- http://secunia.com/advisories/19631
- http://secunia.com/advisories/19649
- http://secunia.com/advisories/22066
- http://www.mozilla.org/security/announce/2006/mfsa2006-29.html
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
- http://www.securityfocus.com/bid/17516
- http://www.vupen.com/english/advisories/2006/1356
- http://www.vupen.com/english/advisories/2006/3748
- http://www.vupen.com/english/advisories/2008/0083
- https://bugzilla.mozilla.org/show_bug.cgi?id=327014
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25827
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471
- http://secunia.com/advisories/19631
- http://secunia.com/advisories/19649
- http://secunia.com/advisories/22066
- http://www.mozilla.org/security/announce/2006/mfsa2006-29.html
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
- http://www.securityfocus.com/bid/17516
- http://www.vupen.com/english/advisories/2006/1356
- http://www.vupen.com/english/advisories/2006/3748
- http://www.vupen.com/english/advisories/2008/0083
- https://bugzilla.mozilla.org/show_bug.cgi?id=327014
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25827
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471