CVE-2005-2262 Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape)....
MediumCVSS 5.1
EPSS 6.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
References
- 16043 third-party-advisory
- 16044 third-party-advisory
- P-252 government-resource third-party-advisory
- www.mikx.de
- www.mozilla.org
- www.networksecurity.fi
- SUSE-SR:2005:018 vendor-advisory
- SUSE-SA:2005:045 vendor-advisory
- RHSA-2005:586 vendor-advisory
- www.securiteam.com
- 14242 vdb-entry
- ADV-2005-1075 vdb-entry
- oval:org.mitre.oval:def:100011 signature vdb-entry
- oval:org.mitre.oval:def:11097 signature vdb-entry