CVE-2005-2706 Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.
MediumCVSS 6.4
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 1.0.6 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla suite | <= 1.7.11 | No fix listed |
| mozilla suite | = 1.7.6 | No fix listed |
| mozilla suite | = 1.7.7 | No fix listed |
| mozilla suite | = 1.7.8 | No fix listed |
| mozilla suite | = 1.7.10 | No fix listed |
References
- 16911 third-party-advisory
- 16917 third-party-advisory
- 16977 third-party-advisory
- 17014 third-party-advisory
- 17026 third-party-advisory
- 17042 third-party-advisory
- 17090 third-party-advisory
- 17149 third-party-advisory
- 17263 third-party-advisory
- 17284 third-party-advisory
- 19823 third-party-advisory
- 1014954 vdb-entry
- DSA-838 vendor-advisory
- DSA-866 vendor-advisory
- DSA-868 vendor-advisory
- MDKSA-2005:169 vendor-advisory
- MDKSA-2005:170 vendor-advisory
- MDKSA-2005:174 vendor-advisory
- www.mozilla.org
- SUSE-SA:2005:058 vendor-advisory
- SUSE-SA:2006:022 vendor-advisory
- 19648 vdb-entry
- FLSA-2006:168375 vendor-advisory
- RHSA-2005:785 vendor-advisory
- RHSA-2005:789 vendor-advisory
- RHSA-2005:791 vendor-advisory
- 14920 vdb-entry
- 15495 vdb-entry
- USN-200-1 vendor-advisory
- ADV-2005-1824 vdb-entry
- mozilla-about-execute-code(22378) vdb-entry
- oval:org.mitre.oval:def:11317 signature vdb-entry
- oval:org.mitre.oval:def:1443 signature vdb-entry