CVE-2005-2704 in Firefox
Summary
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.