CVE-2008-1241: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.

Affected products

• Mozilla Firefox: up to and including 2.0.0.12
• Mozilla Seamonkey: up to and including 1.1.8

Published 2008-03-27. Last modified 2026-06-16.