CVE-2008-0594

Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:N/I:P/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
mozillafirefox
𝑥
≤ 2.0.0.11
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
intrepid
dne
hardy
Fixed 2.0.0.12+2nobinonly+2-0ubuntu3
released
gutsy
Fixed 2.0.0.12+2nobinonly+2-0ubuntu0.7.10
released
feisty
Fixed 2.0.0.12+1nobinonly+2-0ubuntu0.7.4
released
edgy
Fixed 2.0.0.12+0nobinonly+2-0ubuntu0.6.10
released
dapper
Fixed 1.5.dfsg+1.5.0.15~prepatch080202a-0ubuntu1
released
iceape
intrepid
dne
hardy
dne
gutsy
ignored
feisty
dne
edgy
dne
dapper
dne
iceweasel
intrepid
dne
hardy
dne
gutsy
dne
feisty
dne
edgy
dne
dapper
dne
seamonkey
intrepid
Fixed 1.1.9+nobinonly-0ubuntu1
released
hardy
Fixed 1.1.9+nobinonly-0ubuntu1
released
gutsy
dne
feisty
dne
edgy
dne
dapper
dne
xulrunner
intrepid
Fixed 1.8.1.13+nobinonly-0ubuntu1
released
hardy
Fixed 1.8.1.13+nobinonly-0ubuntu1
released
gutsy
Fixed 1.8.1.18+nobinonly.b308.cvs20090331t155113-0ubuntu0.7.10.1
released
feisty
ignored
edgy
ignored
dapper
dne
References
http://browser.netscape.com/releasenotes/
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html
http://secunia.com/advisories/28864
http://secunia.com/advisories/28865
http://secunia.com/advisories/28877
http://secunia.com/advisories/28879
http://secunia.com/advisories/28924
http://secunia.com/advisories/28939
http://secunia.com/advisories/28958
http://secunia.com/advisories/29086
http://secunia.com/advisories/29567
http://secunia.com/advisories/30327
http://secunia.com/advisories/30620
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html
http://wiki.rpath.com/Advisories:rPSA-2008-0051
http://www.debian.org/security/2008/dsa-1484
http://www.debian.org/security/2008/dsa-1485
http://www.debian.org/security/2008/dsa-1489
http://www.debian.org/security/2008/dsa-1506
http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:048
http://www.mozilla.org/security/announce/2008/mfsa2008-11.html
http://www.securityfocus.com/archive/1/487826/100/0/threaded
http://www.securityfocus.com/archive/1/488002/100/0/threaded
http://www.securityfocus.com/bid/27683
http://www.securitytracker.com/id?1019342
http://www.ubuntu.com/usn/usn-576-1
http://www.vupen.com/english/advisories/2008/0453/references
http://www.vupen.com/english/advisories/2008/0627/references
http://www.vupen.com/english/advisories/2008/1793/references
https://bugzilla.mozilla.org/show_bug.cgi?id=408164
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html