PT-2005-5471 · Mozilla · Firefox+2

Bitlance Winter · Published 2005-12-31 · Updated 2017-07-20 · CVE-2005-4809

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.0.1 and possibly other versions Mozilla (affected versions not specified) Thunderbird (affected versions not specified)

Description The issue allows remote attackers to spoof the URL in the Status Bar. This can be achieved via an A HREF tag that contains a TABLE tag, which in turn contains another A tag.

Recommendations For Mozilla Firefox version 1.0.1, update to a version that contains a fix for this issue. For Mozilla, there is no information about a newer version that contains a fix for this issue. For Thunderbird, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2005-4809

Affected Products

Mozilla Firefox

Firefox

Thunderbird

References · 9

• 🔥 http://securityfocus.com/bid/12798 · Exploit
• 🔥 https://exploit-db.com/exploits/25221 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4809 · Security Note
• http://secunia.com/advisories/14568 · Vendor Advisory
• http://securitytracker.com/id?1013423 · Note
• http://marc.info/?l=full-disclosure&m=111073068631287&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19540 · Note
• http://vupen.com/english/advisories/2005/0260 · Note
• http://osvdb.org/14885 · Note