CVE-2007-0779

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.

• ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc
• ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
• http://fedoranews.org/cms/node/2713
• http://fedoranews.org/cms/node/2728
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
• http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
• http://osvdb.org/32109
• http://rhn.redhat.com/errata/RHSA-2007-0077.html
• http://secunia.com/advisories/24205Vendor Advisory
• http://secunia.com/advisories/24238Vendor Advisory
• http://secunia.com/advisories/24287Vendor Advisory
• http://secunia.com/advisories/24290Vendor Advisory
• http://secunia.com/advisories/24293Vendor Advisory
• http://secunia.com/advisories/24320Vendor Advisory
• http://secunia.com/advisories/24328Vendor Advisory
• http://secunia.com/advisories/24333Vendor Advisory
• http://secunia.com/advisories/24342Vendor Advisory
• http://secunia.com/advisories/24343Vendor Advisory
• http://secunia.com/advisories/24384Vendor Advisory
• http://secunia.com/advisories/24393Vendor Advisory
• http://secunia.com/advisories/24395Vendor Advisory
• http://secunia.com/advisories/24437Vendor Advisory
• http://secunia.com/advisories/24455Vendor Advisory
• http://secunia.com/advisories/24457Vendor Advisory
• http://secunia.com/advisories/24650Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200703-04.xml
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
• http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:050
• http://www.mozilla.org/security/announce/2007/mfsa2007-04.htmlPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
• http://www.redhat.com/support/errata/RHSA-2007-0078.html
• http://www.redhat.com/support/errata/RHSA-2007-0079.html
• http://www.redhat.com/support/errata/RHSA-2007-0097.html
• http://www.redhat.com/support/errata/RHSA-2007-0108.html
• http://www.securityfocus.com/archive/1/461336/100/0/threaded
• http://www.securityfocus.com/archive/1/461809/100/0/threaded
• http://www.securityfocus.com/bid/22694Patch
• http://www.securitytracker.com/id?1017700
• http://www.ubuntu.com/usn/usn-428-1
• http://www.vupen.com/english/advisories/2007/0718
• http://www.vupen.com/english/advisories/2008/0083
• https://bugzilla.mozilla.org/show_bug.cgi?id=361298
• https://issues.rpath.com/browse/RPL-1081
• https://issues.rpath.com/browse/RPL-1103
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8757
• ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc
• ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
• http://fedoranews.org/cms/node/2713
• http://fedoranews.org/cms/node/2728
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
• http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
• http://osvdb.org/32109
• http://rhn.redhat.com/errata/RHSA-2007-0077.html
• http://secunia.com/advisories/24205Vendor Advisory
• http://secunia.com/advisories/24238Vendor Advisory
• http://secunia.com/advisories/24287Vendor Advisory
• http://secunia.com/advisories/24290Vendor Advisory
• http://secunia.com/advisories/24293Vendor Advisory
• http://secunia.com/advisories/24320Vendor Advisory
• http://secunia.com/advisories/24328Vendor Advisory
• http://secunia.com/advisories/24333Vendor Advisory
• http://secunia.com/advisories/24342Vendor Advisory
• http://secunia.com/advisories/24343Vendor Advisory
• http://secunia.com/advisories/24384Vendor Advisory
• http://secunia.com/advisories/24393Vendor Advisory
• http://secunia.com/advisories/24395Vendor Advisory
• http://secunia.com/advisories/24437Vendor Advisory
• http://secunia.com/advisories/24455Vendor Advisory
• http://secunia.com/advisories/24457Vendor Advisory
• http://secunia.com/advisories/24650Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200703-04.xml
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851
• http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:050
• http://www.mozilla.org/security/announce/2007/mfsa2007-04.htmlPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
• http://www.redhat.com/support/errata/RHSA-2007-0078.html
• http://www.redhat.com/support/errata/RHSA-2007-0079.html
• http://www.redhat.com/support/errata/RHSA-2007-0097.html
• http://www.redhat.com/support/errata/RHSA-2007-0108.html
• http://www.securityfocus.com/archive/1/461336/100/0/threaded
• http://www.securityfocus.com/archive/1/461809/100/0/threaded
• http://www.securityfocus.com/bid/22694Patch
• http://www.securitytracker.com/id?1017700
• http://www.ubuntu.com/usn/usn-428-1
• http://www.vupen.com/english/advisories/2007/0718
• http://www.vupen.com/english/advisories/2008/0083
• https://bugzilla.mozilla.org/show_bug.cgi?id=361298
• https://issues.rpath.com/browse/RPL-1081
• https://issues.rpath.com/browse/RPL-1103
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8757

Published

Feb 26, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0773The Linux kernel before 2.6.9-42.0.8 in Red Hat 4.4 allows l…
• CVE-2007-0774Stack-based buffer overflow in the map_uri_to_worker functio…
• CVE-2007-0775Multiple unspecified vulnerabilities in the layout engine in…
• CVE-2007-0776Heap-based buffer overflow in the _cairo_pen_init function i…
• CVE-2007-0777The JavaScript engine in Mozilla Firefox before 1.5.0.10 and…
• CVE-2007-0778The page cache feature in Mozilla Firefox before 1.5.0.10 an…
• CVE-2007-0780browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x …
• CVE-2007-0784SQL injection vulnerability in login.asp for tPassword in th…
• CVE-2007-0785PHP remote file inclusion vulnerability in previewtheme.php …
• CVE-2007-0786SQL injection vulnerability in view.php in Noname Media Phot…
• CVE-2007-0787PHP remote file inclusion vulnerability in controller.php in…
• CVE-2007-0788Cross-site scripting (XSS) vulnerability in MediaWiki 1.9.x …