FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0718

This CVE name corresponds to:

Entered	Topic
2004-08-12	Mutiple browser frame injection vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0718 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0718
Phase	Assigned(20040722)

Description

The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

References

Source	Reference
MISC	http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
CONFIRM	http://bugzilla.mozilla.org/show_bug.cgi?id=246448
DEBIAN	DSA-777
DEBIAN	DSA-810
FEDORA	FLSA:2089
MANDRAKE	MDKSA-2004:082
REDHAT	RHSA-2004:421
SCO	SCOSA-2005.49
SUSE	SUSE-SA:2004:036
BID	15495
OVAL	oval:org.mitre.oval:def:4756
OVAL	oval:org.mitre.oval:def:9997
SECUNIA	11978
XF	http-frame-spoof(1598)