CVE-2008-0591 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-0591
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0591

Description: Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-576-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html ST 1019339 SREASON http://securityreason.com/securityalert/2781 SAID Secunia Advisory: SA29049 Secunia Advisory: SA28958 Secunia Advisory: SA28939 Secunia Advisory: SA28924 Secunia Advisory: SA28879 Secunia Advisory: SA28877 Secunia Advisory: SA28865 Secunia Advisory: SA28864 Secunia Advisory: SA28839 Secunia Advisory: SA28766 Secunia Advisory: SA28808 Secunia Advisory: SA28758 Secunia Advisory: SA28818 Secunia Advisory: SA28754 Secunia Advisory: SA29086 Secunia Advisory: SA29167 Secunia Advisory: SA29164 Secunia Advisory: SA29567 Secunia Advisory: SA30327 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0104.html http://www.redhat.com/support/errata/RHSA-2008-0105.html http://www.redhat.com/support/errata/RHSA-2008-0103.html MISC http://lcamtuf.coredump.cx/ffclick2/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 http://www.mandriva.com/security/advisories?name=MDVSA-2008:062 FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1506 http://www.debian.org/security/2008/dsa-1489 http://www.debian.org/security/2008/dsa-1485 http://www.debian.org/security/2008/dsa-1484 CONFIRM http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 http://wiki.rpath.com/Advisories:rPSA-2008-0051 http://browser.netscape.com/releasenotes/ http://wiki.rpath.com/Advisories:rPSA-2008-0093 http://www.mozilla.org/security/announce/2008/mfsa2008-08.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/488002/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/487826/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/488971/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/470446/100/0/threaded BID 24293 27683

Return to the previous page.