PT-2005-3919 · Mozilla+1 · Firefox+1

William B. Ackerman · Published 2005-09-22 · Updated 2017-10-11 · CVE-2005-3089

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Firefox version 1.0.6

Description The issue allows attackers to cause a denial of service, resulting in a crash, via a Proxy Auto-Config (PAC) script that utilizes an eval statement. It is unclear whether an untrusted party can trigger this issue.

Recommendations For Firefox version 1.0.6, as a temporary workaround, consider disabling the use of Proxy Auto-Config (PAC) scripts that utilize eval statements until a patch is available.

Fix

Related Identifiers

CVE-2005-3089

RHSA-2005:785

RHSA-2005:789

RHSA-2005_785

RHSA-2005_789

Affected Products

Firefox

Red Hat

References · 21

• http://securitytracker.com/id?1014949 · Patch
• http://redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html · Vendor Advisory
• http://securityfocus.com/bid/14924 · Patch
• http://mozilla.org/products/firefox/releases/1.0.7.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-3089 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22371 · Note
• https://redhat.com/security/data/cve/CVE-2005-2702.html · Note
• https://rhn.redhat.com/errata/RHSA-2005-785.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9280 · Note
• https://redhat.com/security/data/cve/CVE-2005-2706.html · Note
• https://redhat.com/security/data/cve/CVE-2005-2707.html · Note
• https://redhat.com/security/data/cve/CVE-2005-2968.html · Note
• https://redhat.com/security/data/cve/CVE-2005-2703.html · Note
• https://redhat.com/security/data/cve/CVE-2005-3089.html · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=302100 · Note