CVE ID:	CVE-2008-1241
Description:	GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.
Test IDs:	1.3.6.1.4.1.25623.1.0.60657   1.3.6.1.4.1.25623.1.0.60655   1.3.6.1.4.1.25623.1.0.60653   1.3.6.1.4.1.25623.1.0.60611   1.3.6.1.4.1.25623.1.0.60613   1.3.6.1.4.1.25623.1.0.60862
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1241 1019700 http://www.securitytracker.com/id?1019700 20080327 rPSA-2008-0128-1 firefox http://www.securityfocus.com/archive/1/490196/100/0/threaded 238492 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 28448 http://www.securityfocus.com/bid/28448 29391 http://secunia.com/advisories/29391 29526 http://secunia.com/advisories/29526 29539 http://secunia.com/advisories/29539 29541 http://secunia.com/advisories/29541 29547 http://secunia.com/advisories/29547 29550 http://secunia.com/advisories/29550 29558 http://secunia.com/advisories/29558 29560 http://secunia.com/advisories/29560 29607 http://secunia.com/advisories/29607 29616 http://secunia.com/advisories/29616 29645 http://secunia.com/advisories/29645 30327 http://secunia.com/advisories/30327 30620 http://secunia.com/advisories/30620 ADV-2008-0998 http://www.vupen.com/english/advisories/2008/0998/references ADV-2008-1793 http://www.vupen.com/english/advisories/2008/1793/references DSA-1532 http://www.debian.org/security/2008/dsa-1532 DSA-1534 http://www.debian.org/security/2008/dsa-1534 DSA-1535 http://www.debian.org/security/2008/dsa-1535 GLSA-200805-18 http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml MDVSA-2008:080 http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 RHSA-2008:0207 http://www.redhat.com/support/errata/RHSA-2008-0207.html RHSA-2008:0208 http://rhn.redhat.com/errata/RHSA-2008-0208.html RHSA-2008:0209 http://www.redhat.com/support/errata/RHSA-2008-0209.html SUSE-SA:2008:019 http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html TA08-087A http://www.us-cert.gov/cas/techalerts/TA08-087A.html USN-592-1 http://www.ubuntu.com/usn/usn-592-1 firefox-xul-popup-spoofing(41454) https://exchange.xforce.ibmcloud.com/vulnerabilities/41454 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 http://www.mozilla.org/security/announce/2008/mfsa2008-19.html http://www.mozilla.org/security/announce/2008/mfsa2008-19.html oval:org.mitre.oval:def:11163 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11163