CVE-2005-2704 Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 1.0.6 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla suite | <= 1.7.11 | No fix listed |
| mozilla suite | = 1.7.6 | No fix listed |
| mozilla suite | = 1.7.7 | No fix listed |
| mozilla suite | = 1.7.8 | No fix listed |
| mozilla suite | = 1.7.10 | No fix listed |
References
- 16911 third-party-advisory
- 16917 third-party-advisory
- 16977 third-party-advisory
- 17014 third-party-advisory
- 17026 third-party-advisory
- 17042 third-party-advisory
- 17090 third-party-advisory
- 17149 third-party-advisory
- 17263 third-party-advisory
- 17284 third-party-advisory
- 1014954 vdb-entry
- DSA-838 vendor-advisory
- DSA-866 vendor-advisory
- DSA-868 vendor-advisory
- MDKSA-2005:169 vendor-advisory
- MDKSA-2005:170 vendor-advisory
- MDKSA-2005:174 vendor-advisory
- www.mozilla.org vendor-advisory
- SUSE-SA:2005:058 vendor-advisory
- FLSA-2006:168375 vendor-advisory
- RHSA-2005:785 patch vendor-advisory
- RHSA-2005:789 vendor-advisory
- RHSA-2005:791 vendor-advisory
- 14921 vdb-entry
- 15495 vdb-entry
- USN-200-1 vendor-advisory
- ADV-2005-1824 vdb-entry
- mozilla-thunderbird-xml-object-spoof(22824) vdb-entry
- oval:org.mitre.oval:def:1272 signature vdb-entry
- oval:org.mitre.oval:def:9784 signature vdb-entry