PT-2005-1312 · Mozilla+2 · Firefox+2

Michael Krax · Published 2005-02-08 · Updated 2017-10-11 · CVE-2005-0232

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox version 1.0

Description The issue allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, also known as "Fireflashing."

Recommendations For Firefox version 1.0, as a temporary workaround, consider disabling the use of plugins such as Flash until a patch is available. Restrict access to the about:config site to minimize the risk of exploitation. Avoid using the -moz-opacity filter in web pages until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0232

RHSA-2005:176

RHSA-2005_176

RHSA-2005_323

RHSA-2005_384

Affected Products

Firefox

Flash

Red Hat

References · 74

• 🔥 http://mikx.de/fireflashing · Exploit
• http://gentoo.org/security/en/glsa/glsa-200503-30.xml · Vendor Advisory
• http://mozilla.org/security/announce/mfsa2005-27.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-384.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-323.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0232 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200503-10.xml · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=280664 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-176.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_16_mozilla_firefox.html · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-0592.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0255.html · Note
• http://shmoo.com/idn · Note
• https://redhat.com/security/data/cve/CVE-2005-0399.html · Note
• http://securitytracker.com/id?1013301 · Note