ID CVE-2004-0718
Summary The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
References
Vulnerable Configurations
  • cpe:2.3:a:firebirdsql:firebird:0.7:*:*:*:*:*:*:*
    cpe:2.3:a:firebirdsql:firebird:0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*
    cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 11-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
oval via4
  • accepted 2005-03-09T07:56:00.000-04:00
    class vulnerability
    contributors
    name Brian Soby
    organization The MITRE Corporation
    description The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
    family unix
    id oval:org.mitre.oval:def:4756
    status accepted
    submitted 2005-01-19T12:00:00.000-04:00
    title Mozilla, Firebird, Firefox Frame Injection Vulnerability
    version 35
  • accepted 2013-04-29T04:24:00.946-04:00
    class vulnerability
    contributors
    • name Aharon Chernin
      organization SCAP.com, LLC
    • name Dragos Prisaca
      organization G2, Inc.
    definition_extensions
    • comment The operating system installed on the system is Red Hat Enterprise Linux 3
      oval oval:org.mitre.oval:def:11782
    • comment CentOS Linux 3.x
      oval oval:org.mitre.oval:def:16651
    description The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
    family unix
    id oval:org.mitre.oval:def:9997
    status accepted
    submitted 2010-07-09T03:56:16-04:00
    title The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
    version 29
redhat via4
advisories
rhsa
id RHSA-2004:421
refmap via4
bid 15495
confirm http://bugzilla.mozilla.org/show_bug.cgi?id=246448
debian
  • DSA-777
  • DSA-810
fedora FLSA:2089
mandrake MDKSA-2004:082
misc http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
sco SCOSA-2005.49
secunia 11978
suse SUSE-SA:2004:036
xf http-frame-spoof(1598)
Last major update 11-10-2017 - 01:29
Published 27-07-2004 - 04:00
Last modified 11-10-2017 - 01:29
Back to Top