QwikSec

Security Database

CVE

CWE

Training

CVE-2007-4357

Published: Aug 15, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Mozilla Firefox 2.0.0.6 and earlier allows remote attackers to spoof the contents of the status bar via a link to a data: URI containing an encoded URL. NOTE: the severity of this issue has been disputed by a reliable third party, since the intended functionality of the status bar allows it to be modified.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20070803 Re: [ELEYTT] 3SIERPIEN2007

mailing-list

x_refsource_BUGTRAQ

20070803 [ELEYTT] 3SIERPIEN2007

mailing-list

x_refsource_BUGTRAQ

20070804 Re:Re: [ELEYTT] 3SIERPIEN2007

mailing-list

x_refsource_BUGTRAQ

http://my.opera.com/MichalBucko/blog/firefox-2-0-0-5-uri-encoding-allows-phishing

x_refsource_MISC

20070809 Re:Re: [ELEYTT] 3SIERPIEN2007

mailing-list

x_refsource_BUGTRAQ

20070806 Re: [ELEYTT] 3SIERPIEN2007

mailing-list

x_refsource_BUGTRAQ

http://www.eleytt.com/michal.bucko/Eleytt_PhishAGoGo/bucked2.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.