PT-2005-1311 · Mozilla+1 · Firefox+1

Michael Krax + 1 · Published 2005-02-07 · Updated 2017-10-11 · CVE-2005-0231

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox version 1.0

Description The issue allows remote attackers to bypass the security model by dragging a javascript: or data: URL to a tab, due to the failure of invoking the Javascript Security Manager. This is related to a technique known as "firetabbing."

Recommendations For Firefox version 1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0231

RHSA-2005:176

RHSA-2005_176

RHSA-2005_384

Affected Products

Firefox

Red Hat

References · 59

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=280056 · Exploit
• 🔥 http://gentoo.org/security/en/glsa/glsa-200503-10.xml · Exploit
• 🔥 http://mozilla.org/security/announce/mfsa2005-26.html · Exploit
• 🔥 http://mikx.de/firetabbing · Exploit
• 🔥 http://novell.com/linux/security/advisories/2005_16_mozilla_firefox.html · Exploit
• 🔥 http://gentoo.org/security/en/glsa/glsa-200503-30.xml · Exploit
• http://redhat.com/support/errata/RHSA-2005-384.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0231 · Security Note
• http://redhat.com/support/errata/RHSA-2005-176.html · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-0592.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0255.html · Note
• http://shmoo.com/idn · Note
• http://securitytracker.com/id?1013301 · Note
• http://mikx.de/firescrolling2 · Note
• https://redhat.com/security/data/cve/CVE-2005-1154.html · Note