Description
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
References
- 12188 third-party-advisory
- mozilla-user-interface-spoofing(16837) vdb-entry
- SUSE-SA:2004:036 vendor-advisory
- RHSA-2004:421 vendor-advisory
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
- FLSA:2089 vendor-advisory
- oval:org.mitre.oval:def:2418 vdb-entry signature
- 15495 vdb-entry
- VU#262350 third-party-advisory
- 10832 vdb-entry
- http://bugzilla.mozilla.org/show_bug.cgi?id=244965
- oval:org.mitre.oval:def:9419 vdb-entry signature