CVE-2005-2268

Published: Jul 13, 2005Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

Affected (38)

Products: Mozilla: Firefox, Mozilla

2 products

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0
Mozilla Mozilla	Version 1.3
Mozilla Mozilla	Version 1.4.1
Mozilla Mozilla	Version 1.4
Mozilla Mozilla	Version 1.4 alpha
Mozilla Mozilla	Version 1.5.1
Mozilla Mozilla	Version 1.5
Mozilla Mozilla	Version 1.5 alpha
Mozilla Mozilla	Version 1.5 rc1
Mozilla Mozilla	Version 1.5 rc2
Mozilla Mozilla	Version 1.6
Mozilla Mozilla	Version 1.6 alpha
Mozilla Mozilla	Version 1.6 beta
Mozilla Mozilla	Version 1.7.1
Mozilla Mozilla	Version 1.7.2
Mozilla Mozilla	Version 1.7.3
Mozilla Mozilla	Version 1.7.5
Mozilla Mozilla	Version 1.7.6
Mozilla Mozilla	Version 1.7.7
Mozilla Mozilla	Version 1.7.8
Mozilla Mozilla	Version 1.7
Mozilla Mozilla	Version 1.7 alpha
Mozilla Mozilla	Version 1.7 beta
Mozilla Mozilla	Version 1.7 rc1
Mozilla Mozilla	Version 1.7 rc2
Mozilla Mozilla	Version 1.7 rc3

References (30)

http://secunia.com/advisories/15489

Source: secalert@redhat.com

ExploitPatchVendor Advisory

http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/

Source: secalert@redhat.com

Exploit

http://www.debian.org/security/2005/dsa-810

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/mfsa2005-54.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_18_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_45_mozilla.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-586.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-587.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14242

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2005/1075

Source: secalert@redhat.com

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100005

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10517

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1268

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1313

Source: secalert@redhat.com

http://secunia.com/advisories/15489

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.debian.org/security/2005/dsa-810

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/mfsa2005-54.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_18_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_45_mozilla.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-586.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-587.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14242

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/1075

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100005

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10517

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1268

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1313

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.