Published: 02/05/2005 Updated: 03/05/2018

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

FireFox 1.0.1 and Mozilla prior to 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote malicious users to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.9.3
mozilla firefox 0.9
mozilla mozilla 1.5
mozilla mozilla 1.7.2
mozilla mozilla 1.7.3
mozilla firefox 0.8
mozilla mozilla 1.4
mozilla mozilla 1.4.1
mozilla mozilla 1.6
mozilla mozilla 1.7
mozilla firefox 0.10
mozilla firefox 0.10.1
mozilla firefox 1.0
mozilla mozilla 1.3
mozilla mozilla 1.7.5
mozilla firefox 0.9.1
mozilla firefox 0.9.2
mozilla mozilla 1.5.1
mozilla mozilla 1.7.1

USN-149-1 fixed some vulnerabilities in the Ubuntu 504 (Hoary Hedgehog) version of Firefox The version shipped with Ubuntu 410 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well Please see ...

Synopsis firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla Firefox is an open source ...

Synopsis mozilla security update Type/Severity Security Advisory: Critical Topic Updated mozilla packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla is an open source Web bro ...

Synopsis Mozilla security update Type/Severity Security Advisory: Important Topic Updated Mozilla packages that fix various security bugs are now availableThis update has been rated as having Important security impact by the RedHat Security Response Team Description Mozilla is an open sou ...

NVD-CWE-Other http://mikx.de/firescrolling2/http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://www.redhat.com/support/errata/RHSA-2005-335.html http://www.redhat.com/support/errata/RHSA-2005-336.html http://secunia.com/advisories/14654 http://www.securityfocus.com/bid/12885 http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.vupen.com/english/advisories/2005/0296 http://www.mozilla.org/security/announce/mfsa2005-32.html http://marc.info/?l=bugtraq&m=111168413007891&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9650 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100026 https://nvd.nist.gov https://usn.ubuntu.com/149-3/

CVE-2005-0401

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect