CVE-2007-1004 | Vulnerability Database | Aqua Security

Mozilla Firefox might allow remote attackers to conduct spoofing and phishing attacks by writing to an about:blank tab and overlaying the location bar.

Affected Software

Name	Vendor	Start Version	End Version
Firefox	Mozilla	2.0-rc3 (including)	2.0-rc3 (including)
Firefox	Ubuntu	dapper	*
Firefox	Ubuntu	edgy	*
Firefox	Ubuntu	feisty	*
Firefox	Ubuntu	gutsy	*
Firefox	Ubuntu	upstream	*

References

http://osvdb.org/33255
http://osvdb.org/33769
http://secunia.com/advisories/24153
http://securityreason.com/securityalert/2264
http://www.securityfocus.com/archive/1/460369/100/0/threaded
http://www.securityfocus.com/archive/1/460412/100/0/threaded
http://www.securityfocus.com/archive/1/460617/100/0/threaded
http://www.securityfocus.com/bid/22601
https://exchange.xforce.ibmcloud.com/vulnerabilities/32580
http://osvdb.org/33255
http://osvdb.org/33769
http://secunia.com/advisories/24153
http://securityreason.com/securityalert/2264
http://www.securityfocus.com/archive/1/460369/100/0/threaded
http://www.securityfocus.com/archive/1/460412/100/0/threaded
http://www.securityfocus.com/archive/1/460617/100/0/threaded
http://www.securityfocus.com/bid/22601
https://exchange.xforce.ibmcloud.com/vulnerabilities/32580

NVD	https://nvd.nist.gov/vuln/detail/CVE-2007-1004
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html