CVE Feed

    Dashboard / CVE / CVE-2004-0718

    CVE-2004-0718

    The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

    Published:Jul 1, 2004
    Last Modified:Apr 16, 2026
    EPS:Jul 23, 2004
    EPSS Score:0.0191
    CVSS Score:7.5

    Affected Products

    Vendor
    Firebirdsql
    Product
    Firebird
    Vendor
    Mozilla
    Product
    Mozilla
    Vendor
    Netscape
    Product
    Navigator
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-40342 (CVSS 9.9) — Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14…
    CVE-2026-35215 (CVSS 7.5) — Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14…
    CVE-2026-34232 (CVSS 7.5) — Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14…
    CVE-2026-33337 (CVSS 7.5) — Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14…
    CVE-2026-28224 (CVSS 8.2) — Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14…
    CVE-2026-28214 (CVSS 6) — Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14…
    CVE-2026-27890 (CVSS 8.2) — Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14…
    CVE-2026-28212 (CVSS 7.5) — Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and…
    CVE-2025-65104 (CVSS 7.9) — Firebird is an open-source relational database management system. In versions FB3 of the client library placed…
    CVE-2025-24975 (CVSS 7.1) — Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird …

    References

    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
    http://bugzilla.mozilla.org/show_bug.cgi?id=246448
    http://marc.info/?l=bugtraq&m=109900315219363&w=2
    http://secunia.com/advisories/11978
    http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
    http://www.debian.org/security/2005/dsa-777
    http://www.debian.org/security/2005/dsa-810
    http://www.mandriva.com/security/advisories?name=MDKSA-2004:082
    http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
    http://www.redhat.com/support/errata/RHSA-2004-421.html
    http://www.securityfocus.com/bid/15495
    https://exchange.xforce.ibmcloud.com/vulnerabilities/1598
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4756
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9997
    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
    http://bugzilla.mozilla.org/show_bug.cgi?id=246448
    http://marc.info/?l=bugtraq&m=109900315219363&w=2
    http://secunia.com/advisories/11978
    http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
    http://www.debian.org/security/2005/dsa-777
    http://www.debian.org/security/2005/dsa-810
    http://www.mandriva.com/security/advisories?name=MDKSA-2004:082
    http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
    http://www.redhat.com/support/errata/RHSA-2004-421.html
    http://www.securityfocus.com/bid/15495
    https://exchange.xforce.ibmcloud.com/vulnerabilities/1598
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4756
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9997

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High