CVE-2007-2871

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.5.x through 1.5.0.11 Mozilla Firefox versions 2.x through 2.0.0.3 SeaMonkey version 1.0.9 SeaMonkey version 1.1.2

Description The issue allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. This can be leveraged for phishing and other attacks.

Recommendations For Mozilla Firefox versions 1.5.x through 1.5.0.11, update to version 1.5.0.12 or later. For Mozilla Firefox versions 2.x through 2.0.0.3, update to version 2.0.0.4 or later. For SeaMonkey version 1.0.9, update to a version later than 1.0.9. For SeaMonkey version 1.1.2, update to a version later than 1.1.2.