PT-2005-3919 · Mozilla+1 · Firefox+1

William B. Ackerman · Publicado 2005-09-22 · Atualizado 2017-10-11 · CVE-2005-3089

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Firefox version 1.0.6

Description The issue allows attackers to cause a denial of service, resulting in a crash, via a Proxy Auto-Config (PAC) script that utilizes an eval statement. It is unclear whether an untrusted party can trigger this issue.

Recommendations For Firefox version 1.0.6, as a temporary workaround, consider disabling the use of Proxy Auto-Config (PAC) scripts that utilize eval statements until a patch is available.

Correção

Identificadores relacionados

CVE-2005-3089

RHSA-2005:785

RHSA-2005:789

RHSA-2005_785

RHSA-2005_789

Produtos afetados

Firefox

Red Hat

Referências · 21

• https://exchange.xforce.ibmcloud.com/vulnerabilities/22371 · Nota
• https://redhat.com/security/data/cve/CVE-2005-2702.html · Nota
• https://rhn.redhat.com/errata/RHSA-2005-785.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9280 · Nota
• https://redhat.com/security/data/cve/CVE-2005-2706.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-2707.html · Nota
• http://securitytracker.com/id?1014949 · Correção
• https://redhat.com/security/data/cve/CVE-2005-2968.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-2703.html · Nota
• http://redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html · Aviso do Fabricante
• http://securityfocus.com/bid/14924 · Correção
• https://redhat.com/security/data/cve/CVE-2005-3089.html · Nota
• http://mozilla.org/products/firefox/releases/1.0.7.html · Correção
• https://bugzilla.mozilla.org/show_bug.cgi?id=302100 · Nota
• https://redhat.com/security/data/cve/CVE-2005-2704.html · Nota