Overview
Mozilla's XUL contains a vulnerability that may allow a web application to cover an active window's titlebar.
Description
XUL is Mozilla's XML-based user interface language. XUL can be used to create Mozilla applications, extensions, and web applications. From Mozilla Foundation Security Advisory 2007-33: |
Impact
An attacker may be able to create phishing or spoofed websites. |
Solution
Upgrade Mozilla has released Firefox 2.0.0.8 and SeaMonkey 1.1.5 to address this issue. |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to Mozilla for information that was used in this report. Mozilla credits Eli Friedman for discovering this vulnerability.
This document was written by Ryan Giobbi.
Other Information
| CVE IDs: | CVE-2007-5334 |
| Severity Metric: | 3.23 |
| Date Public: | 2007-10-19 |
| Date First Published: | 2007-10-19 |
| Date Last Updated: | 2007-10-19 19:05 UTC |
| Document Revision: | 3 |