Published: 02/05/2005 Updated: 11/10/2017

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

VMScore: 231

Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N

Firefox prior to 1.0 and Mozilla prior to 1.7.5 allow remote malicious users to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.8
mozilla firefox 0.9
mozilla mozilla 1.7.3
mozilla mozilla 1.7
mozilla mozilla 1.7.1
mozilla mozilla 1.7.2
mozilla firefox 0.9.1
mozilla firefox 0.9.2
mozilla firefox 0.9.3

Synopsis mozilla security update Type/Severity Security Advisory: Critical Topic Updated mozilla packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla is an open source Web bro ...

USN-149-1 fixed some vulnerabilities in the Ubuntu 504 (Hoary Hedgehog) version of Firefox The version shipped with Ubuntu 410 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well Please see ...

NVD-CWE-Other http://www.mozilla.org/security/announce/mfsa2005-01.html https://bugzilla.mozilla.org/show_bug.cgi?id=249332 http://www.redhat.com/support/errata/RHSA-2005-323.html http://www.redhat.com/support/errata/RHSA-2005-335.html http://www.securityfocus.com/bid/12407 https://exchange.xforce.ibmcloud.com/vulnerabilities/19168 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10756 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100057 https://access.redhat.com/errata/RHSA-2005:323 https://nvd.nist.gov https://usn.ubuntu.com/149-3/

CVE-2005-0141

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect