Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-0718

Fixed in a distro release EPSS 2%

The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

Published 2004-07-23 · CVE record · OSV

Products: firebirdsql firebird, mozilla, netscape navigator

Distro releases

ReleasePackageFixed in
Debian 3.1mozilla2:1.7.8-1sarge1
Debian 3.1mozilla2:1.7.8-1sarge2
Debian 3.1mozilla-firefox1.0.4-2sarge1
Debian 4.0mozilla2:1.7.8-1sarge2
Debian 4.0mozilla2:1.7.8-1sarge1
Debian 4.0mozilla-firefox1.0.4-2sarge3