PT-2005-1311 · Mozilla+1 · Firefox+1

Michael Krax + 1 · Publicado 2005-02-07 · Atualizado 2017-10-11 · CVE-2005-0231

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox version 1.0

Description The issue allows remote attackers to bypass the security model by dragging a javascript: or data: URL to a tab, due to the failure of invoking the Javascript Security Manager. This is related to a technique known as "firetabbing."

Recommendations For Firefox version 1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-0231

RHSA-2005:176

RHSA-2005_176

RHSA-2005_384

Produtos afetados

Firefox

Red Hat

Referências · 59

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=280056 · Exploit
• 🔥 http://gentoo.org/security/en/glsa/glsa-200503-10.xml · Exploit
• 🔥 http://mozilla.org/security/announce/mfsa2005-26.html · Exploit
• 🔥 http://mikx.de/firetabbing · Exploit
• 🔥 http://novell.com/linux/security/advisories/2005_16_mozilla_firefox.html · Exploit
• 🔥 http://gentoo.org/security/en/glsa/glsa-200503-30.xml · Exploit
• https://redhat.com/security/data/cve/CVE-2005-0592.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0255.html · Nota
• http://shmoo.com/idn · Nota
• http://securitytracker.com/id?1013301 · Nota
• http://mikx.de/firescrolling2 · Nota
• https://redhat.com/security/data/cve/CVE-2005-1154.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0146.html · Nota
• http://securityfocus.com/bid/13211 · Nota
• http://redhat.com/support/errata/RHSA-2005-384.html · Aviso do Fabricante