PT-2005-3189 · Mozilla+2 · Firefox+3

John Dalbec

·

Publicado

2005-07-13

·

Atualizado

2017-10-11

·

CVE-2005-2260

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 1.0.5 Mozilla versions prior to 1.7.9 Netscape versions 7.2 and 8.0.2
Description: The issue concerns the browser user interface, which fails to properly distinguish between user-generated events and untrusted synthetic events. This makes it easier for remote attackers to perform actions that are normally restricted to manual user input.
Recommendations: For Firefox versions prior to 1.0.5, update to version 1.0.5 or later. For Mozilla versions prior to 1.7.9, update to version 1.7.9 or later. For Netscape versions 7.2 and 8.0.2, consider applying available patches or updates, or restricting access to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-2260
DSA-779-1
DSA-779-2
DSA-810-1
DTSA-14-1
DTSA-8-2
RHSA-2005:586
RHSA-2005:587
RHSA-2005_586
RHSA-2005_587

Produtos afetados

Firefox
Mozilla Firefox
Netscape
Red Hat