Description
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.
References
- SUSE-SA:2004:036 vendor-advisory
- RHSA-2004:421 vendor-advisory
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
- FLSA:2089 vendor-advisory
- 15495 vdb-entry
- oval:org.mitre.oval:def:3603 vdb-entry signature
- http://bugzilla.mozilla.org/show_bug.cgi?id=240053
- mozilla-redirect-ssl-spoof(16871) vdb-entry
- oval:org.mitre.oval:def:9240 vdb-entry signature