← Back

CVE-2004-0905

nvd nist
Published: Sep 14, 2004Modified: Apr 16, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.

Affected (62)

Products: Conectiva: Linux · Mozilla: Firefox, Mozilla · Netscape: Navigator · +2 more
Show all products
1 product
Linux
2 products
Firefox
Mozilla
1 product
Navigator
5 products
Enterprise Linux
Enterprise Linux Desktop
Fedora Core
Linux
Linux Advanced Workstation
1 product
Suse Linux
Configuration A
37 vulnerable
Vulnerable SoftwareAffected Versions
Conectiva
Version 10.0
Version 9.0
Mozilla
Version 0.8
Version 0.9.1
Version 0.9.2
Version 0.9.3
Version 0.9
Version 0.9 rc
Mozilla
Version 1.0.1
Version 1.0.2
Version 1.0
Version 1.0 rc1
Version 1.0 rc2
Version 1.1
Version 1.1 alpha
Version 1.1 beta
Version 1.2.1
Version 1.2
Version 1.2 alpha
Version 1.2 beta
Version 1.3.1
Version 1.3
Version 1.4.1
Version 1.4.2
Version 1.4
Version 1.4 alpha
Version 1.4 beta
Version 1.5
Version 1.6
Version 1.7.1
Version 1.7.2
Version 1.7
Version 1.7 rc3
Netscape
Version 7.0.2
Version 7.0
Version 7.1
Version 7.2
Configuration B
25 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Version 2.1
Version 2.1
Version 2.1
Version 2.1
Version 2.1
Version 2.1
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version core_1.0
Redhat
Version 7.3
Version 7.3
Version 7.3
Version 9.0
Redhat
Version 2.1
Version 2.1
Suse
Version 1.0
Version 8.1
Version 8.2
Version 8
Version 9.0
Version 9.0
Version 9.0
Version 9.1

References (22)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.