| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 1.5.0.6 | |
| seamonkey | ≤ 1.0.4 |
Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free