PT-2005-1312 · Mozilla+2 · Firefox+2
Michael Krax
·
Publicado
2005-02-08
·
Atualizado
2017-10-11
·
CVE-2005-0232
CVSS v2.0
2.6
Baixa
| Vetor | AV:N/AC:H/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox version 1.0
Description
The issue allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, also known as "Fireflashing."
Recommendations
For Firefox version 1.0, as a temporary workaround, consider disabling the use of plugins such as Flash until a patch is available. Restrict access to the about:config site to minimize the risk of exploitation. Avoid using the -moz-opacity filter in web pages until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Flash
Red Hat