CVE-2007-5334

Publication date 21 October 2007

Last updated 17 July 2025

Ubuntu priority

Description

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox	7.10 gutsy	Fixed in 2.0.0.8+2nobinonly-0ubuntu1
	7.04 feisty	Fixed in 2.0.0.8+1nobinonly-0ubuntu1
	6.10 edgy	Fixed in 2.0.0.8+0dfsg-0ubuntu0.6.10
	6.06 LTS dapper	Fixed in 1.5.dfsg+1.5.0.14~prepatch071011b-0ubuntu1
mozilla-thunderbird	7.04 feisty	Fixed in 1.5.0.13+1.5.0.14b-0ubuntu0.7.04
	6.10 edgy	Fixed in 1.5.0.13+1.5.0.14b-0ubuntu0.6.10
	6.06 LTS dapper	Fixed in 1.5.0.13+1.5.0.14b-0ubuntu0.6.06
thunderbird	7.10 gutsy	Fixed in 2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10

References

Related Ubuntu Security Notices (USN)

USN-536-1
Thunderbird vulnerabilities
23 October 2007

USN-535-1
Firefox vulnerabilities
22 October 2007

Other references

https://www.cve.org/CVERecord?id=CVE-2007-5334