Description
Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.ubuntu.com/usn/usn-576-1 ↗
- http://browser.netscape.com/releasenotes/ ↗
- http://secunia.com/advisories/28939 ↗
- http://www.debian.org/security/2008/dsa-1506 ↗
- http://secunia.com/advisories/30620 ↗
- http://secunia.com/advisories/28865 ↗
- http://www.vupen.com/english/advisories/2008/0453/references ↗
- http://secunia.com/advisories/28877 ↗
- http://secunia.com/advisories/28879 ↗
- http://secunia.com/advisories/29567 ↗
- http://secunia.com/advisories/28958 ↗
- http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html ↗
- http://secunia.com/advisories/30327 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 ↗
- http://www.debian.org/security/2008/dsa-1489 ↗
- http://www.securityfocus.com/archive/1/488002/100/0/threaded ↗
- http://www.securityfocus.com/archive/1/487826/100/0/threaded ↗
- http://secunia.com/advisories/29086 ↗
- http://secunia.com/advisories/28864 ↗
- http://www.debian.org/security/2008/dsa-1485 ↗
- http://secunia.com/advisories/28924 ↗
- http://www.securityfocus.com/bid/27683 ↗
- http://www.vupen.com/english/advisories/2008/1793/references ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html ↗
- http://www.securitytracker.com/id?1019342 ↗
- http://www.mozilla.org/security/announce/2008/mfsa2008-11.html ↗
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html ↗
- http://wiki.rpath.com/Advisories:rPSA-2008-0051 ↗
- http://www.debian.org/security/2008/dsa-1484 ↗
- http://www.vupen.com/english/advisories/2008/0627/references ↗
- https://bugzilla.mozilla.org/show_bug.cgi?id=408164 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml ↗
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 ↗