Vulnerability in Mozilla Firefox
CVE-2005-2264
Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.
EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox — versions 0.8, 0.9, 0.9.1
- N/a — versions n/a
References
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (government-resource, x_refsource_CIAC, third-party-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (Exploit, x_refsource_MISC, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)