CVE ID:	CVE-2006-1740
Description:	Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1740 102550 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 17516 http://www.securityfocus.com/bid/17516 19631 http://secunia.com/advisories/19631 19696 http://secunia.com/advisories/19696 19714 http://secunia.com/advisories/19714 19721 http://secunia.com/advisories/19721 19729 http://secunia.com/advisories/19729 19746 http://secunia.com/advisories/19746 19759 http://secunia.com/advisories/19759 19794 http://secunia.com/advisories/19794 19811 http://secunia.com/advisories/19811 19852 http://secunia.com/advisories/19852 19862 http://secunia.com/advisories/19862 19863 http://secunia.com/advisories/19863 19902 http://secunia.com/advisories/19902 19941 http://secunia.com/advisories/19941 20060404-01-U ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc 21033 http://secunia.com/advisories/21033 21622 http://secunia.com/advisories/21622 228526 http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 ADV-2006-1356 http://www.vupen.com/english/advisories/2006/1356 DSA-1044 http://www.debian.org/security/2006/dsa-1044 DSA-1046 http://www.debian.org/security/2006/dsa-1046 DSA-1051 http://www.debian.org/security/2006/dsa-1051 FEDORA-2006-410 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html FEDORA-2006-411 http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html FLSA:189137-1 http://www.securityfocus.com/archive/1/436296/100/0/threaded FLSA:189137-2 http://www.securityfocus.com/archive/1/436338/100/0/threaded GLSA-200604-12 http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml GLSA-200604-18 http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml HPSBUX02122 http://www.securityfocus.com/archive/1/438730/100/0/threaded MDKSA-2006:075 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 MDKSA-2006:076 http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 RHSA-2006:0328 http://www.redhat.com/support/errata/RHSA-2006-0328.html RHSA-2006:0329 http://www.redhat.com/support/errata/RHSA-2006-0329.html SCOSA-2006.26 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt SSRT061158 http://www.securityfocus.com/archive/1/438730/100/0/threaded SUSE-SA:2006:021 http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html USN-271-1 https://usn.ubuntu.com/271-1/ USN-275-1 https://usn.ubuntu.com/275-1/ http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://www.mozilla.org/security/announce/2006/mfsa2006-12.html http://www.mozilla.org/security/announce/2006/mfsa2006-12.html https://bugzilla.mozilla.org/show_bug.cgi?id=271194 https://bugzilla.mozilla.org/show_bug.cgi?id=271194 mozilla-secure-site-spoofing(25813) https://exchange.xforce.ibmcloud.com/vulnerabilities/25813 oval:org.mitre.oval:def:10424 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10424 oval:org.mitre.oval:def:1811 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1811