FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0761

This CVE name corresponds to:

Entered	Topic
2004-09-22	mozilla -- security icon spoofing

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0761 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0761
Phase	Assigned(20040802)

Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.

References

Source	Reference
CONFIRM	http://bugzilla.mozilla.org/show_bug.cgi?id=240053
CONFIRM	http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
FEDORA	FLSA:2089
REDHAT	RHSA-2004:421
SCO	SCOSA-2005.49
SUSE	SUSE-SA:2004:036
BID	15495
OVAL	oval:org.mitre.oval:def:3603
OVAL	oval:org.mitre.oval:def:9240
XF	mozilla-redirect-ssl-spoof(16871)