---
title: "CVE-2005-2707\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2005-2707?format=md
keywords: index, follow
---

# CVE-2005-2707

Publication date 23 September 2005

Last updated 17 July 2025

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote
attackers to spawn windows without user interface components such as the
address and status bar, which could be used to conduct spoofing or phishing
attacks.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| firefox | 7.04 feisty | Fixed 2.0.0.6+1-0ubuntu1 |
| 6.10 edgy | Fixed 2.0.0.6+0dfsg-0ubuntu0.6.10 |
| 6.06 LTS dapper | Fixed 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1 |
| mozilla | 7.04 feisty | Not in release |
| 6.10 edgy | Fixed 1.7.12-1.1ubuntu2 |
| 6.06 LTS dapper | Fixed 1.7.12-1.1ubuntu2 |
| mozilla-thunderbird | 7.04 feisty | Fixed 1.5.0.13-0ubuntu0.7.04 |
| 6.10 edgy | Fixed 1.5.0.13-0ubuntu0.6.10 |
| 6.06 LTS dapper | Fixed 1.5.0.13-0ubuntu0.6.06 |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2707)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2005-2707)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2005-2707)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2005-2707)

### Related Ubuntu Security Notices (USN)

+ [USN-200-1](https://usn.ubuntu.com/USN-200-1)
+ Thunderbird vulnerabilities
+ 11 October 2005

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2005-2707>
