PT-2005-3190 · K Meleon+3 · K-Meleon+5
John Dalbec
·
Publicado
2005-07-13
·
Atualizado
2017-10-11
·
CVE-2005-2261
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Firefox versions prior to 1.0.5
Thunderbird versions prior to 1.0.5
Mozilla versions prior to 1.7.9
Netscape version 8.0.2
K-Meleon version 0.9
Description:
The issue allows remote attackers to bypass protection by running XBL scripts even when Javascript has been disabled, making it easier to exploit.
Recommendations:
For Firefox versions prior to 1.0.5, update to version 1.0.5 or later.
For Thunderbird versions prior to 1.0.5, update to version 1.0.5 or later.
For Mozilla versions prior to 1.7.9, update to version 1.7.9 or later.
For Netscape version 8.0.2, consider disabling XBL scripts until a patch is available.
For K-Meleon version 0.9, consider disabling XBL scripts until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
K-Meleon
Mozilla Firefox
Netscape
Red Hat
Thunderbird