CVE-2007-0779: Mozilla Firefox

Medium severity, CVSS 6.4. EPSS: 1.6% chance of exploitation in the next 30 days.

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.

Affected products

• Mozilla Firefox: version 0.8 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.9_rc only; version 0.10 only; …
• Mozilla Seamonkey: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …

Published 2007-02-26. Last modified 2026-06-16.