Multiple Mozilla browsers contain a Javascript flaw that may allow an attacker to open a dialog box in front of a window displaying a trusted web site. This can allow them to make it appear that the dialog box comes from the trusted web site, which may be used to trick users into entering passwords or other sensitive information.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Public
OSVDB:
Web Related
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, Mozilla has released an update to address this vulnerability. Check the vendor advisory or solution in the references section.
