Multiple Vendor Internet Browser User Action Prediction/Interception Weakness
BID:10661
Info
Multiple Vendor Internet Browser User Action Prediction/Interception Weakness
| Bugtraq ID: | 10661 |
| Class: | Design Error |
| CVE: |
CVE-2004-0762 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 05 2004 12:00AM |
| Updated: | Jul 12 2009 06:16AM |
| Credit: | Discovery of this weakness is credited to Jesse Ruderman <[email protected]>. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 8 SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 SuSE Linux 8.1 SGI Advanced Linux Environment 3.0 SCO Unixware 7.1.4 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 Redhat Linux 9.0 i386 Redhat Linux 7.3 i686 Redhat Linux 7.3 i386 Redhat Linux 7.3 Redhat Fedora Core1 Mozilla Firefox 0.9 rc Mozilla Firefox 0.8 Mozilla Browser 1.7 rc3 Mozilla Browser 1.6 Mozilla Browser 1.5 Mozilla Browser 1.4.2 Mozilla Browser 1.4.1 Mozilla Browser 1.4 b Mozilla Browser 1.4 a Mozilla Browser 1.4 Mozilla Browser 1.3.1 Mozilla Browser 1.3 Mozilla Browser 1.2.1 Mozilla Browser 1.2 Beta Mozilla Browser 1.2 Alpha Mozilla Browser 1.2 Mozilla Browser 1.1 Beta Mozilla Browser 1.1 Alpha Mozilla Browser 1.1 Mozilla Browser 1.0.2 Mozilla Browser 1.0.1 Mozilla Browser 1.0 RC2 Mozilla Browser 1.0 RC1 Mozilla Browser 1.0 Mozilla Browser 0.9.48 Mozilla Browser 0.9.35 Mozilla Browser 0.9.9 Mozilla Browser 0.9.8 Mozilla Browser 0.9.7 Mozilla Browser 0.9.6 Mozilla Browser 0.9.5 Mozilla Browser 0.9.4 .1 Mozilla Browser 0.9.4 Mozilla Browser 0.9.3 Mozilla Browser 0.9.2 .1 Mozilla Browser 0.9.2 Mozilla Browser 0.8 Mozilla Browser M16 Mozilla Browser M15 Microsoft Internet Explorer 5.0.1 SP4 Microsoft Internet Explorer 5.0.1 SP3 Microsoft Internet Explorer 5.0.1 SP2 Microsoft Internet Explorer 5.0.1 SP1 Microsoft Internet Explorer 5.0.1 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.5 SP2 Microsoft Internet Explorer 5.5 SP1 Microsoft Internet Explorer 5.5 Mandriva Linux Mandrake 10.0 AMD64 Mandriva Linux Mandrake 10.0 Mandriva Linux Mandrake 9.2 amd64 Mandriva Linux Mandrake 9.2 Avaya Network Routing |
| Not Vulnerable: | |
Discussion
Multiple Vendor Internet Browser User Action Prediction/Interception Weakness
Multiple vendor Internet Browsers are reported prone to a weakness where user actions may be used to commit unintentional actions. It is reported that if a malicious website can control or predict a user action, then a malicious site may popup a dialog and have the user unintentionally commit an action to that dialog.
The issue is reported to be exploitable through the XPInstall dialog feature of Mozilla and Mozilla Firefox. Other browsers are also vulnerable.
Multiple vendor Internet Browsers are reported prone to a weakness where user actions may be used to commit unintentional actions. It is reported that if a malicious website can control or predict a user action, then a malicious site may popup a dialog and have the user unintentionally commit an action to that dialog.
The issue is reported to be exploitable through the XPInstall dialog feature of Mozilla and Mozilla Firefox. Other browsers are also vulnerable.
Exploit / POC
Multiple Vendor Internet Browser User Action Prediction/Interception Weakness
The following proof of concept is available:
http://bugzilla.mozilla.org/attachment.cgi?id=94712&action=view
http://bugzilla.mozilla.org/attachment.cgi?id=145416&action=view
The following proof of concept is available:
http://bugzilla.mozilla.org/attachment.cgi?id=94712&action=view
http://bugzilla.mozilla.org/attachment.cgi?id=145416&action=view
Solution / Fix
Multiple Vendor Internet Browser User Action Prediction/Interception Weakness
Solution:
Mozilla has released Mozilla 1.7 and Mozilla Firefox 0.9 to address this issue:
SCO has released an advisory SCOSA-2005.25 including updated packages to address this issue. Please see the referenced advisory for more information.
Avaya has released an advisory that acknowledges this vulnerability for Avaya products. Fixes are not currently available; customers are advised to contact the vendor for further details regarding fix availability. Please see the referenced Avaya advisory at the following location for further details:
http://support.avaya.com/japple/css/japple?temp.groupID=128450&temp.selectedFamily=128451&temp.selectedProduct=154235&temp.selectedBucket=126655&temp.feedbackState=askForFeedback&temp.documentID=198527&PAGE=avaya.css.CSSLvl1Detail&executeTransaction=avaya.css.UsageUpdate()
RedHat has released advisory RHSA-2004:421-17 and fixes dealing with this issue for Mozilla on RedHat Enterprise Linux platforms. Please see the referenced advisory for further information.
Slackware has released an advisory (SSA:2004-223-01) to address this issue. Please see the referenced advisory for more information.
Mandrake Linux has released advisory MDKSA-2004:082 along with fixes addressing this issue. Please see the referenced advisory for further information.
SGI has made available Patch 10095, correcting this vulnerability for systems running SGI Advanced Linux Environment 3:
Patch 10095 is available from http://support.sgi.com/ and
ftp://patches.sgi.com/support/free/security/patches/ProPack/3/
The individual RPMs from Patch 10095 are available from:
ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS
ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/SRPMS
SuSE Linux has released advisory SUSE-SA:2004:036 along with fixes dealing with this issue. Please see the referenced advisory for more information.
The Fedora Legacy project has released advisory FLSA-2004:2089 along with fixes to address multiple issues in RedHat Fedora Core 1, and RedHat Linux 7.3 and 9.0. Please see the referenced advisory for further information.
Mozilla Browser M15
Mozilla Browser M16
Mozilla Firefox 0.8
Mozilla Browser 0.8
Mozilla Firefox 0.9 rc
Mozilla Browser 0.9.2 .1
Mozilla Browser 0.9.2
Mozilla Browser 0.9.3
Mozilla Browser 0.9.35
Mozilla Browser 0.9.4
Mozilla Browser 0.9.4 .1
Mozilla Browser 0.9.48
Mozilla Browser 0.9.5
Mozilla Browser 0.9.6
Mozilla Browser 0.9.7
Mozilla Browser 0.9.8
Mozilla Browser 0.9.9
Mozilla Browser 1.0
Mozilla Browser 1.0 RC1
Mozilla Browser 1.0 RC2
Mozilla Browser 1.0.1
Mozilla Browser 1.0.2
Mozilla Browser 1.1
Mozilla Browser 1.1 Alpha
Mozilla Browser 1.1 Beta
Mozilla Browser 1.2 Alpha
Mozilla Browser 1.2
Mozilla Browser 1.2 Beta
Mozilla Browser 1.2.1
Mozilla Browser 1.3
Mozilla Browser 1.3.1
Mozilla Browser 1.4
Mozilla Browser 1.4 a
Mozilla Browser 1.4 b
Mozilla Browser 1.4.1
Mozilla Browser 1.4.2
Mozilla Browser 1.5
Mozilla Browser 1.6
Mozilla Browser 1.7 rc3
Solution:
Mozilla has released Mozilla 1.7 and Mozilla Firefox 0.9 to address this issue:
SCO has released an advisory SCOSA-2005.25 including updated packages to address this issue. Please see the referenced advisory for more information.
Avaya has released an advisory that acknowledges this vulnerability for Avaya products. Fixes are not currently available; customers are advised to contact the vendor for further details regarding fix availability. Please see the referenced Avaya advisory at the following location for further details:
http://support.avaya.com/japple/css/japple?temp.groupID=128450&temp.selectedFamily=128451&temp.selectedProduct=154235&temp.selectedBucket=126655&temp.feedbackState=askForFeedback&temp.documentID=198527&PAGE=avaya.css.CSSLvl1Detail&executeTransaction=avaya.css.UsageUpdate()
RedHat has released advisory RHSA-2004:421-17 and fixes dealing with this issue for Mozilla on RedHat Enterprise Linux platforms. Please see the referenced advisory for further information.
Slackware has released an advisory (SSA:2004-223-01) to address this issue. Please see the referenced advisory for more information.
Mandrake Linux has released advisory MDKSA-2004:082 along with fixes addressing this issue. Please see the referenced advisory for further information.
SGI has made available Patch 10095, correcting this vulnerability for systems running SGI Advanced Linux Environment 3:
Patch 10095 is available from http://support.sgi.com/ and
ftp://patches.sgi.com/support/free/security/patches/ProPack/3/
The individual RPMs from Patch 10095 are available from:
ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS
ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/SRPMS
SuSE Linux has released advisory SUSE-SA:2004:036 along with fixes dealing with this issue. Please see the referenced advisory for more information.
The Fedora Legacy project has released advisory FLSA-2004:2089 along with fixes to address multiple issues in RedHat Fedora Core 1, and RedHat Linux 7.3 and 9.0. Please see the referenced advisory for further information.
Mozilla Browser M15
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser M16
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Firefox 0.8
-
Mozilla Firefox 0.9.1
http://www.mozilla.org/products/firefox/
Mozilla Browser 0.8
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Firefox 0.9 rc
-
Mozilla Firefox 0.9.1
http://www.mozilla.org/products/firefox/
Mozilla Browser 0.9.2 .1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.3
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.35
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.4
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.4 .1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.48
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.5
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.6
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.7
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.8
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.9
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/ -
RedHat galeon-1.2.13-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/galeon-1.2.13 -0.7.1.legacy.i386.rpm -
RedHat mozilla-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-1.4.3 -0.7.1.legacy.i386.rpm -
RedHat mozilla-chat-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-chat- 1.4.3-0.7.1.legacy.i386.rpm -
RedHat mozilla-devel-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-devel -1.4.3-0.7.1.legacy.i386.rpm -
RedHat mozilla-dom-inspector-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-dom-i nspector-1.4.3-0.7.1.legacy.i386.rpm -
RedHat mozilla-js-debugger-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-js-de bugger-1.4.3-0.7.1.legacy.i386.rpm -
RedHat mozilla-mail-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-mail- 1.4.3-0.7.1.legacy.i386.rpm -
RedHat mozilla-nspr-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-nspr- 1.4.3-0.7.1.legacy.i386.rpm -
RedHat mozilla-nspr-devel-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-nspr- devel-1.4.3-0.7.1.legacy.i386.rpm -
RedHat mozilla-nss-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-nss-1 .4.3-0.7.1.legacy.i386.rpm -
RedHat mozilla-nss-devel-1.4.3-0.7.1.legacy.i386.rpm
RedHat Linux 7.3
http://download.fedoralegacy.org/redhat/7.3/updates/i386/mozilla-nss-d evel-1.4.3-0.7.1.legacy.i386.rpm
Mozilla Browser 1.0
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.0 RC1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.0 RC2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.0.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.0.2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.1 Alpha
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.1 Beta
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.2 Alpha
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.2 Beta
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.2.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/ -
RedHat galeon-1.2.13-0.9.2.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/galeon-1.2.13-0 .9.2.legacy.i386.rpm -
RedHat mozilla-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-1.4.3-0 .9.1.legacy.i386.rpm -
RedHat mozilla-chat-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-chat-1. 4.3-0.9.1.legacy.i386.rpm -
RedHat mozilla-devel-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-devel-1 .4.3-0.9.1.legacy.i386.rpm -
RedHat mozilla-dom-inspector-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-dom-ins pector-1.4.3-0.9.1.legacy.i386.rpm -
RedHat mozilla-js-debugger-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-js-debu gger-1.4.3-0.9.1.legacy.i386.rpm -
RedHat mozilla-mail-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-mail-1. 4.3-0.9.1.legacy.i386.rpm -
RedHat mozilla-nspr-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nspr-1. 4.3-0.9.1.legacy.i386.rpm -
RedHat mozilla-nspr-devel-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nspr-de vel-1.4.3-0.9.1.legacy.i386.rpm -
RedHat mozilla-nss-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nss-1.4 .3-0.9.1.legacy.i386.rpm -
RedHat mozilla-nss-devel-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nss-dev el-1.4.3-0.9.1.legacy.i386.rpm
Mozilla Browser 1.3
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.3.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.4
-
Mandrake libnspr4-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libnspr4-devel-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libnss3-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libnss3-devel-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-devel-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-devel-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-dom-inspector-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-dom-inspector-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-enigmail-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-enigmail-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-enigmime-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-enigmime-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-irc-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-irc-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-js-debugger-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-js-debugger-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-mail-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-mail-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-spellchecker-1.4-13.3.92mdk.amd64.rpm
Mandrake Linux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-spellchecker-1.4-13.3.92mdk.i586.rpm
Mandrake Linux 9.2
http://www.mandrakesecure.net/en/ftp.php -
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/ -
Slackware mozilla-1.4.3-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/m ozilla-1.4.3-i486-1.tgz -
Slackware mozilla-plugins-1.4.3-noarch-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/m ozilla-plugins-1.4.3-noarch-1.tgz
Mozilla Browser 1.4 a
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.4 b
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.4.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/ -
RedHat epiphany-1.0.4-2.4.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/epiphany-1.0.4- 2.4.legacy.i386.rpm -
RedHat mozilla-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-1.4.3-1 .fc1.1.legacy.i386.rpm -
RedHat mozilla-chat-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-chat-1. 4.3-1.fc1.1.legacy.i386.rpm -
RedHat mozilla-devel-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-devel-1 .4.3-1.fc1.1.legacy.i386.rpm -
RedHat mozilla-dom-inspector-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-dom-ins pector-1.4.3-1.fc1.1.legacy.i386.rpm -
RedHat mozilla-js-debugger-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-js-debu gger-1.4.3-1.fc1.1.legacy.i386.rpm -
RedHat mozilla-mail-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-mail-1. 4.3-1.fc1.1.legacy.i386.rpm -
RedHat mozilla-nspr-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-1. 4.3-1.fc1.1.legacy.i386.rpm -
RedHat mozilla-nspr-devel-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-de vel-1.4.3-1.fc1.1.legacy.i386.rpm -
RedHat mozilla-nss-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-1.4 .3-1.fc1.1.legacy.i386.rpm -
RedHat mozilla-nss-devel-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-dev el-1.4.3-1.fc1.1.legacy.i386.rpm
Mozilla Browser 1.4.2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.5
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.6
-
Mandrake libnspr4-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libnspr4-devel-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libnss3-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake libnss3-devel-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-devel-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-devel-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-dom-inspector-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-dom-inspector-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-enigmail-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-enigmail-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-enigmime-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-enigmime-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-irc-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-irc-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-js-debugger-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-js-debugger-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-mail-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-mail-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-spellchecker-1.6-12.1.100mdk.amd64.rpm
Mandrake Linux 10.0/AMD64
http://www.mandrakesecure.net/en/ftp.php -
Mandrake mozilla-spellchecker-1.6-12.1.100mdk.i586.rpm
Mandrake Linux 10.0
http://www.mandrakesecure.net/en/ftp.php -
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7 rc3
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
References
Multiple Vendor Internet Browser User Action Prediction/Interception Weakness
References:
References:
- Bugzilla Bug 162020 pop up XPInstall/security dialog when user is about to click (Mozilla)
- Mozilla Homepage (Mozilla Foundation)
- RHSA-2004:421-17 - Updated mozilla packages fix security issues (RedHat)