CVE-2007-5334

NameCVE-2007-5334
DescriptionMozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the Window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute.
SourceCVE (at NVD; oss-sec, fulldisc, OSVDB, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, more)
ReferencesDSA-1392-1, DSA-1396-1, DSA-1401-1, DTSA-69-1, DTSA-80-1
NVD severitymedium (attack range: remote, user-initiated)
Debian/oldstablenot vulnerable.
Debian/stablenot vulnerable.
Debian/testingnot vulnerable.
Debian/unstablenot vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
iceape (PTS)squeeze (security)2.0.11-17fixed
iceweasel (PTS)squeeze (security), squeeze3.5.16-20fixed
wheezy31.3.0esr-1~deb7u1fixed
wheezy (security)31.5.3esr-1~deb7u1fixed
jessie, sid31.5.3esr-1fixed
xulrunner (PTS)wheezy, wheezy (security)24.8.1esr-2~deb7u1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
iceapesource(unstable)1.1.5medium
iceapesourceetch1.0.11~pre071022-0etch1mediumDSA-1401-1
iceapesourcelenny1.0.11~pre071022-0etch1+lenny1mediumDTSA-80-1
iceweaselsource(unstable)2.0.0.8-1medium
iceweaselsourceetch2.0.0.6+2.0.0.8-0etch1mediumDSA-1396-1
xulrunnersource(unstable)1.8.1.9-1medium
xulrunnersourceetch1.8.0.14~pre071019b-0etch1mediumDSA-1392-1
xulrunnersourcelenny1.8.0.14~pre071019b-0lenny1mediumDTSA-69-1

Notes

MFSA2007-33

Search for package or bug name: Reporting problems