CVE-2005-0591

Published: May 2, 2005Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."

Affected (9)

Products: Mozilla: Firefox

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0

References (28)

http://marc.info/?l=bugtraq&m=110547286002188&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/13786

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml

Source: secalert@redhat.com

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Source: secalert@redhat.com

PatchVendor Advisory

http://www.mikx.de/firespoofing/

Source: secalert@redhat.com

Exploit

http://www.mikx.de/index.php?p=7

Source: secalert@redhat.com

Vendor Advisory

http://www.mozilla.org/security/announce/mfsa2005-16.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-176.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-384.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/12234

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=260560

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18864

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=110547286002188&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/13786

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mikx.de/firespoofing/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.mikx.de/index.php?p=7

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mozilla.org/security/announce/mfsa2005-16.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-176.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-384.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/12234

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=260560

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18864

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.