CVE ID:	CVE-2007-2871
Description:	Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other attacks.
Test IDs:	1.3.6.1.4.1.25623.1.0.58356   1.3.6.1.4.1.25623.1.0.58351   1.3.6.1.4.1.25623.1.0.58353
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2871 BugTraq ID: 24242 http://www.securityfocus.com/bid/24242 Bugtraq: 20070531 FLEA-2007-0023-1: firefox (Google Search) http://www.securityfocus.com/archive/1/470172/100/200/threaded Cert/CC Advisory: TA07-151A http://www.us-cert.gov/cas/techalerts/TA07-151A.html Debian Security Information: DSA-1300 (Google Search) http://www.debian.org/security/2007/dsa-1300 Debian Security Information: DSA-1306 (Google Search) http://www.debian.org/security/2007/dsa-1306 Debian Security Information: DSA-1308 (Google Search) http://www.debian.org/security/2007/dsa-1308 http://security.gentoo.org/glsa/glsa-200706-06.xml HPdes Security Advisory: HPSBUX02153 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 HPdes Security Advisory: SSRT061181 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 http://osvdb.org/35137 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11433 RedHat Security Advisories: RHSA-2007:0400 http://www.redhat.com/support/errata/RHSA-2007-0400.html RedHat Security Advisories: RHSA-2007:0401 http://www.redhat.com/support/errata/RHSA-2007-0401.html RedHat Security Advisories: RHSA-2007:0402 http://www.redhat.com/support/errata/RHSA-2007-0402.html http://www.securitytracker.com/id?1018155 http://www.securitytracker.com/id?1018156 http://secunia.com/advisories/25469 http://secunia.com/advisories/25476 http://secunia.com/advisories/25488 http://secunia.com/advisories/25490 http://secunia.com/advisories/25491 http://secunia.com/advisories/25533 http://secunia.com/advisories/25534 http://secunia.com/advisories/25559 http://secunia.com/advisories/25635 http://secunia.com/advisories/25647 http://secunia.com/advisories/25685 http://secunia.com/advisories/25750 http://secunia.com/advisories/25858 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 SuSE Security Announcement: SUSE-SA:2007:036 (Google Search) http://www.novell.com/linux/security/advisories/2007_36_mozilla.html http://www.ubuntu.com/usn/usn-468-1 http://www.vupen.com/english/advisories/2007/1994 XForce ISS Database: mozilla-xulpopups-spoofing(34606) https://exchange.xforce.ibmcloud.com/vulnerabilities/34606