PT-2005-1464 · Mozilla+1 · Mozilla Firefox+2

Michael Krax · Publicado 2005-03-23 · Atualizado 2018-05-03 · CVE-2005-0401

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox version 1.0.1 Mozilla versions prior to 1.7.6

Description The issue allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar. This is related to insufficient addressing of attack vectors for loading chrome files and hijacking drag and drop events.

Recommendations For Firefox version 1.0.1, update to a version that sufficiently addresses all attack vectors for loading chrome files and hijacking drag and drop events. For Mozilla versions prior to 1.7.6, update to version 1.7.6 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-0401

RHSA-2005:335

RHSA-2005:336

RHSA-2005_335

RHSA-2005_336

RHSA-2005_384

Produtos afetados

Firefox

Mozilla Firefox

Red Hat

Referências · 66

• 🔥 http://securityfocus.com/bid/12885 · Exploit
• 🔥 http://mikx.de/firescrolling2 · Exploit
• https://redhat.com/security/data/cve/CVE-2005-0146.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0141.html · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0527.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0399.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0591.html · Nota
• http://redhat.com/support/errata/RHSA-2005-335.html · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-0233.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0586.html · Nota
• https://redhat.com/security/data/cve/CVE-2004-1380.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1159.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0989.html · Nota
• http://gentoo.org/security/en/glsa/glsa-200503-30.xml · Aviso do Fabricante