CVE ID:	CVE-2009-2654
Description:	Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.
Test IDs:	1.3.6.1.4.1.25623.1.0.64575
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2654 BugTraq ID: 35803 http://www.securityfocus.com/bid/35803 Bugtraq: 20090724 URL spoofing bug involving Firefox's error pages and document.write (Google Search) http://www.securityfocus.com/archive/1/505242/30/0/threaded Bugtraq: 20090727 Re: URL spoofing bug involving Firefox's error pages and document.write (Google Search) http://www.securityfocus.com/archive/1/505265 Debian Security Information: DSA-1873 (Google Search) http://www.debian.org/security/2009/dsa-1873 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html http://es.geocities.com/jplopezy/firefoxspoofing.html http://osvdb.org/56717 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686 RedHat Security Advisories: RHSA-2009:1430 http://www.redhat.com/support/errata/RHSA-2009-1430.html RedHat Security Advisories: RHSA-2009:1431 http://www.redhat.com/support/errata/RHSA-2009-1431.html RedHat Security Advisories: RHSA-2009:1432 http://www.redhat.com/support/errata/RHSA-2009-1432.html http://www.securitytracker.com/id?1022603 http://secunia.com/advisories/36001 http://secunia.com/advisories/36126 http://secunia.com/advisories/36141 http://secunia.com/advisories/36435 http://secunia.com/advisories/36669 http://secunia.com/advisories/36670 http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 https://usn.ubuntu.com/811-1/ http://www.vupen.com/english/advisories/2009/2006 http://www.vupen.com/english/advisories/2009/2142