CVE-2004-0718 — Vulnetix

Try Vulnetix Request Demo

CVE-2004-0718 PUBLISHED CVSS 7.5 HIGH

The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

EPSS 1.91% · 83.2th percentile

Risk Scores

CVSS v2.0

7.5

EPSS Score

1.91%

83.2th percentile

Affected Products

Vendor	Product	Versions
firebirdsql	firebird	0.7
n/a	n/a	n/a
mozilla	mozilla	1.6
netscape	navigator	7.1

Timeline

Jul 23, 2004 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
Jul 10, 2023 EPSS Score
Aug 31, 2023 EPSS Score

References

DSA-810 vendor-advisory
DSA-777 vendor-advisory
http-frame-spoof(1598) vdb
SCOSA-2005.49 vendor-advisory
SUSE-SA:2004:036 vendor-advisory
RHSA-2004:421 vendor-advisory
MDKSA-2004:082 vendor-advisory
FLSA:2089 vendor-advisory
15495 vdb
11978 third-party-advisory
oval:org.mitre.oval:def:4756 vdb
http://bugzilla.mozilla.org/show_bug.cgi?id=246448 url
http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/ url
oval:org.mitre.oval:def:9997 vdb
https://nvd.nist.gov/vuln/detail/CVE-2004-0718 advisory
http://secunia.com/multiple_browsers_frame_injection_vulnerability_test url

Open in Interactive Console →