CVE-2006-1740

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site.

Score

CVSS 2.0 2.6 Low

Status

Modified - secalert@redhat.com

Published

2006-04-14

Last modified

2024-08-07

Affected products

• Firefox (Mozilla)
• Mozilla Suite (Mozilla)
• Seamonkey (Mozilla)
• Thunderbird (Mozilla)

References

• http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html
• http://secunia.com/advisories/19631
• http://secunia.com/advisories/19696
• http://secunia.com/advisories/19714
• http://secunia.com/advisories/19721
• http://secunia.com/advisories/19729
• http://secunia.com/advisories/19746
• http://secunia.com/advisories/19759
• http://secunia.com/advisories/19794
• http://secunia.com/advisories/19811
• http://secunia.com/advisories/19852
• http://secunia.com/advisories/19862
• http://secunia.com/advisories/19863
• http://secunia.com/advisories/19902
• http://secunia.com/advisories/19941
• http://secunia.com/advisories/21033
• http://secunia.com/advisories/21622
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
• http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
• http://www.debian.org/security/2006/dsa-1044
• http://www.debian.org/security/2006/dsa-1046
• http://www.debian.org/security/2006/dsa-1051
• http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml
• http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:075
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:076
• http://www.mozilla.org/security/announce/2006/mfsa2006-12.html