FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mozilla -- security icon spoofing

Affected packages
	firefox	<	0.9
	linux-mozilla	<	1.7
	linux-mozilla-devel	<	1.7
	mozilla	<	1.7,2
	mozilla-gtk1	<	1.7

Details

VuXML ID	e9f9d232-0cb2-11d9-8a8a-000c41e2cdad
Discovery	2004-04-08
Entry	2004-09-22

Under certain situations it is possible for the security icon which Mozilla displays when connected to a site using SSL to be spoofed. This could be used to make so-called "phishing attacks" more difficult to detect.

References

CVE Name	CVE-2004-0761
URL	https://bugzilla.mozilla.org/show_bug.cgi?id=240053