CVE-2004-0718
Fixed in a distro release EPSS 2%
The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Products: firebirdsql firebird, mozilla, netscape navigator
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | mozilla | 2:1.7.8-1sarge1 |
| Debian 3.1 | mozilla | 2:1.7.8-1sarge2 |
| Debian 3.1 | mozilla-firefox | 1.0.4-2sarge1 |
| Debian 4.0 | mozilla | 2:1.7.8-1sarge2 |
| Debian 4.0 | mozilla | 2:1.7.8-1sarge1 |
| Debian 4.0 | mozilla-firefox | 1.0.4-2sarge3 |