5
CVSSv2

CVE-2008-0594

Published: 09/02/2008 Updated: 15/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Mozilla Firefox prior to 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote malicious users to conduct phishing attacks.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox

Vendor Advisories

Various flaws were discovered in the browser and JavaScript engine By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user’s privileges (CVE-2008-0412, CVE-2008-0413) ...
Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0412 Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine, which might al ...
Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0412 Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engi ...
Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0412 Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the lay ...
Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0412 Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engin ...
Mozilla Foundation Security Advisory 2008-11 Web forgery overwrite with div overlay Announced February 7, 2008 Reporter Emil Ljungdahl, Lars-Olof Moilanen Impact Low Products Firefox Fixed in ...

References

NVD-CWE-Otherhttp://www.mozilla.org/security/announce/2008/mfsa2008-11.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=408164http://wiki.rpath.com/Advisories:rPSA-2008-0051http://www.debian.org/security/2008/dsa-1484http://www.debian.org/security/2008/dsa-1485http://www.debian.org/security/2008/dsa-1489http://www.ubuntu.com/usn/usn-576-1http://www.securityfocus.com/bid/27683http://www.securitytracker.com/id?1019342http://secunia.com/advisories/28864http://secunia.com/advisories/28865http://secunia.com/advisories/28877http://secunia.com/advisories/28879https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.htmlhttp://secunia.com/advisories/28924http://secunia.com/advisories/28939http://browser.netscape.com/releasenotes/http://www.debian.org/security/2008/dsa-1506http://www.mandriva.com/security/advisories?name=MDVSA-2008:048http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.htmlhttp://secunia.com/advisories/28958http://secunia.com/advisories/29086http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.htmlhttp://secunia.com/advisories/29567http://secunia.com/advisories/30327http://www.gentoo.org/security/en/glsa/glsa-200805-18.xmlhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1http://secunia.com/advisories/30620http://www.vupen.com/english/advisories/2008/0627/referenceshttp://www.vupen.com/english/advisories/2008/0453/referenceshttp://www.vupen.com/english/advisories/2008/1793/referenceshttp://www.securityfocus.com/archive/1/488002/100/0/threadedhttp://www.securityfocus.com/archive/1/487826/100/0/threadedhttps://usn.ubuntu.com/576-1/https://nvd.nist.gov