Published: 13/07/2005 Updated: 11/10/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Firefox prior to 1.0.5 allows remote malicious users to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.9
mozilla firefox 0.9.1
mozilla firefox 1.0.3
mozilla firefox 1.0.4
mozilla firefox 0.10
mozilla firefox 1.0
mozilla firefox 0.9.2
mozilla firefox 0.9.3
mozilla firefox 0.10.1
mozilla firefox 0.8
mozilla firefox 1.0.1
mozilla firefox 1.0.2

Synopsis firefox security update Type/Severity Security Advisory: Important Topic An updated firefox package that fixes various security bugs is nowavailable for Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedHat Security Response Team Descripti ...

USN-149-1 fixed some vulnerabilities in the Ubuntu 504 (Hoary Hedgehog) version of Firefox The version shipped with Ubuntu 410 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well Please see ...

Secuniacom reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718 This allowed a malicious web site to spoof the contents of other web sites (CAN-2005-1937) ...

NVD-CWE-Other http://www.mozilla.org/security/announce/mfsa2005-49.html https://bugzilla.mozilla.org/show_bug.cgi?id=294074 http://www.ciac.org/ciac/bulletins/p-252.shtml http://www.securityfocus.com/bid/14242 http://secunia.com/advisories/16043 http://www.redhat.com/support/errata/RHSA-2005-586.html http://www.novell.com/linux/security/advisories/2005_45_mozilla.html http://www.novell.com/linux/security/advisories/2005_18_sr.html http://www.vupen.com/english/advisories/2005/1075 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9887 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100009 https://access.redhat.com/errata/RHSA-2005:586 https://nvd.nist.gov https://usn.ubuntu.com/149-3/

CVE-2005-2264

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect