CVE-2005-2264

Published: Jul 13, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.

Affected (13)

Products: Mozilla: Firefox

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0

References (22)

http://secunia.com/advisories/16043

Source: secalert@redhat.com

http://www.ciac.org/ciac/bulletins/p-252.shtml

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/mfsa2005-49.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_18_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_45_mozilla.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-586.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14242

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2005/1075

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=294074

Source: secalert@redhat.com

ExploitVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100009

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9887

Source: secalert@redhat.com

http://secunia.com/advisories/16043

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/p-252.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/mfsa2005-49.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_18_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_45_mozilla.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-586.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14242

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/1075

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=294074

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100009

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9887

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.