Mozilla.Dialog.Box.Origin.Spoofing

Description

It indicates a possible exploit of a dialog origin spoofing vulnerability in Firefox and Mozilla that may allow remote attackers to spoof a dialog box from a trusted site, and facilitates phishing attacks.

Affected Products

Netscape Netscape 8.0.1
Mozilla Firefox 1.0.4
Mozilla Firefox 1.0.3
Mozilla Firefox 1.0.2
Mozilla Firefox 1.0.1
Mozilla Firefox 1.0
Mozilla Firefox 0.10.1
Mozilla Firefox 0.10
Mozilla Firefox 0.9.3
Mozilla Firefox 0.9.2
Mozilla Firefox 0.9.1
Mozilla Firefox 0.9 rc
Mozilla Firefox 0.9
Mozilla Firefox 0.8
Mozilla Firefox Preview Release
Mozilla Browser 1.8 Alpha 4
Mozilla Browser 1.8 Alpha 3
Mozilla Browser 1.8 Alpha 2
Mozilla Browser 1.8 Alpha 1
Mozilla Browser 1.7.8
Mozilla Browser 1.7.7
Mozilla Browser 1.7.6
Mozilla Browser 1.7.5
Mozilla Browser 1.7.4
Mozilla Browser 1.7.3
Mozilla Browser 1.7.2
Mozilla Browser 1.7.1
Mozilla Browser 1.7 rc3
Mozilla Browser 1.7 rc2
Mozilla Browser 1.7 rc1
Mozilla Browser 1.7 beta
Mozilla Browser 1.7 alpha
Mozilla Browser 1.7
Mozilla Browser 1.6
Mozilla Browser 1.5.1
Mozilla Browser 1.5
Mozilla Browser 1.4.4
Mozilla Browser 1.4.2
Mozilla Browser 1.4.1
Mozilla Browser 1.4 b
Mozilla Browser 1.4 a
Mozilla Browser 1.4
Mozilla Browser 1.3.1
Mozilla Browser 1.3
Mozilla Browser 1.2.1
Mozilla Browser 1.2 Beta
Mozilla Browser 1.2 Alpha
Mozilla Browser 1.2
Mozilla Browser 1.1 Beta
Mozilla Browser 1.1 Alpha
Mozilla Browser 1.1
Mozilla Browser 1.0.2
Mozilla Browser 1.0.1
Mozilla Browser 1.0 RC2
Mozilla Browser 1.0 RC1
Mozilla Browser 0.9.48
Mozilla Browser 0.9.35
Mozilla Browser 0.9.9
Mozilla Browser 0.9.8
Mozilla Browser 0.9.7
Mozilla Browser 0.9.6
Mozilla Browser 0.9.5
Mozilla Browser 0.9.4 .1
Mozilla Browser 0.9.4
Mozilla Browser 0.9.3
Mozilla Browser 0.9.2 .1
Mozilla Browser 0.9.2
Mozilla Browser 0.8
Mozilla Browser M16
Mozilla Browser M15

Impact

Facilitates phishing attacks.

Recommended Actions

Apply the corresponding fix from following web sites:
Mozilla Browser M15
* Mozilla Browser Suite 1.x
Mozilla Firefox Preview Release
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Browser M16
* Mozilla Browser Suite 1.x
Mozilla Firefox 0.10
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Firefox 0.10.1
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Firefox 0.8
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
* SUSE MozillaFirefox-1.0.6-4.2.i586.rpm
SUSE Linux 9.1
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/MozillaFirefox-1. 0.6-4.2.i586.rpm
* SUSE MozillaFirefox-1.0.6-4.2.x86_64.rpm
SUSE Linux 9.1
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/MozillaFirefo x-1.0.6-4.2.x86_64.rpm
* SUSE MozillaFirefox-translations-1.0.6-4.2.x86_64.rpm
SUSE Linux 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/MozillaFirefo x-translations-1.0.6-4.2.x86_64.rpm
Mozilla Browser 0.8
* Mozilla Browser Suite 1.x
Mozilla Firefox 0.9
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Firefox 0.9 rc
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Firefox 0.9.1
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Browser 0.9.2 .1
* Mozilla Browser Suite 1.x
Mozilla Firefox 0.9.2
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Browser 0.9.2
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.3
* Mozilla Browser Suite 1.x
Mozilla Firefox 0.9.3
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Browser 0.9.35
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.4
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.4 .1
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.48
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.5
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.6
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.7
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.8
* Mozilla Browser Suite 1.x
Mozilla Browser 0.9.9
* Mozilla Browser Suite 1.x
Mozilla Browser 1.0
* Mozilla Browser Suite 1.x
Mozilla Firefox 1.0
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Browser 1.0 RC1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.0 RC2
* Mozilla Browser Suite 1.x
Mozilla Firefox 1.0.1
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
* SUSE MozillaFirefox-1.0.6-4.1.i586.rpm
SUSE Linux 9.3
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/MozillaFirefox-1. 0.6-4.1.i586.rpm
* SUSE MozillaFirefox-1.0.6-4.1.x86_64.rpm
SUSE Linux 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/MozillaFirefox- 1.0.6-4.1.x86_64.rpm
Mozilla Browser 1.0.1
* Mozilla Browser Suite 1.x
Mozilla Firefox 1.0.2
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
* Ubuntu mozilla-firefox-dev_1.0.2-0ubuntu5.4_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox-dev_1.0.2-0ubuntu5.4_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox-dev_1.0.2-0ubuntu5.4_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox-dom-inspector_1.0.2-0ubuntu5.4_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox-dom-inspector_1.0.2-0ubuntu5.4_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox-dom-inspector_1.0.2-0ubuntu5.4_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox-gnome-support_1.0.2-0ubuntu5.4_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox-gnome-support_1.0.2-0ubuntu5.4_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox-gnome-support_1.0.2-0ubuntu5.4_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox_1.0.2-0ubuntu5.4_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox_1.0.2-0ubuntu5.4_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-firefox_1.0.2-0ubuntu5.4_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
Mozilla Browser 1.0.2
* Mozilla Browser Suite 1.x
Mozilla Firefox 1.0.3
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Firefox 1.0.4
* Mozilla Firefox 1.0.5
http://www.mozilla.org/products/firefox/
Mozilla Browser 1.1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.1 Alpha
* Mozilla Browser Suite 1.x
Mozilla Browser 1.1 Beta
* Mozilla Browser Suite 1.x
Mozilla Browser 1.2 Alpha
* Mozilla Browser Suite 1.x
Mozilla Browser 1.2
* Mozilla Browser Suite 1.x
Mozilla Browser 1.2 Beta
* Mozilla Browser Suite 1.x
Mozilla Browser 1.2.1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.3
* Mozilla Browser Suite 1.x
Mozilla Browser 1.3.1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.4
* Mozilla Browser Suite 1.x
Mozilla Browser 1.4 a
* Mozilla Browser Suite 1.x
Mozilla Browser 1.4 b
* Mozilla Browser Suite 1.x
Mozilla Browser 1.4.1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.4.2
* Mozilla Browser Suite 1.x
Mozilla Browser 1.4.4
* Mozilla Browser Suite 1.x
Mozilla Browser 1.5
* Mozilla Browser Suite 1.x
Mozilla Browser 1.5.1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.6
* Mozilla Browser Suite 1.x
* SUSE MozillaFirefox-translations-1.0.6-4.2.i586.rpm
SUSE Linux 9.1
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/MozillaFirefox-1. 0.6-4.2.i586.rpm
Mozilla Browser 1.7 rc1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7
* Mozilla Browser Suite 1.x
* Ubuntu libnspr-dev_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnspr-dev_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnspr-dev_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnspr-dev_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnspr-dev_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnspr-dev_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnspr4_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnspr4_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnspr4_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnspr4_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnspr4_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnspr4_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnss-dev_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnss-dev_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnss-dev_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnss-dev_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnss-dev_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnss-dev_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnss3_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnss3_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnss3_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu libnss3_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnss3_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu libnss3_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-browser_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-browser_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-browser_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-browser_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-browser_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-browser_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-calendar_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-calendar_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-calendar_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-calendar_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-calendar_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-calendar_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-chatzilla_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-chatzilla_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-chatzilla_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-chatzilla_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-chatzilla_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-chatzilla_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-dev_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-dev_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-dev_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-dev_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-dev_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-dev_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-js-debugger_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-js-debugger_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-js-debugger_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-js-debugger_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-js-debugger_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-js-debugger_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-mailnews_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-mailnews_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-mailnews_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-mailnews_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-mailnews_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-mailnews_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-psm_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-psm_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-psm_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla-psm_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla-psm_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/
* Ubuntu mozilla-psm_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla_1.7.10-0ubuntu04.10_amd64.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla_1.7.10-0ubuntu04.10_i386.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla_1.7.10-0ubuntu04.10_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
* Ubuntu mozilla_1.7.10-0ubuntu05.04_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla_1.7.10-0ubuntu05.04_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
* Ubuntu mozilla_1.7.10-0ubuntu05.04_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
Mozilla Browser 1.7 rc2
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7 alpha
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7 beta
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7 rc3
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7.1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7.2
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7.3
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7.4
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7.5
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7.6
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7.7
* Mozilla Browser Suite 1.x
Mozilla Browser 1.7.8
* Mozilla Browser Suite 1.x
Mozilla Browser 1.8 Alpha 1
* Mozilla Browser Suite 1.x
Mozilla Browser 1.8 Alpha 3
* Mozilla Browser Suite 1.x
Mozilla Browser 1.8 Alpha 2
* Mozilla Browser Suite 1.x
Mozilla Browser 1.8 Alpha 4
* Mozilla Browser Suite 1.x
Netscape Netscape 8.0.1
* Netscape Netscape 8.x Latest Download

References