5

CVE-2005-0150

EPSS 1.43%
Veröffentlicht 26.05.2005 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version0.8

Mozilla ≫ Firefox Version0.9

Mozilla ≫ Firefox Version0.9 Updaterc

Mozilla ≫ Firefox Version0.9.1

Mozilla ≫ Firefox Version0.9.2

Mozilla ≫ Firefox Version0.9.3

Mozilla ≫ Firefox Version0.10

Mozilla ≫ Firefox Version0.10.1

Mozilla ≫ Firefox Version1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.43%	0.788

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://www.securityfocus.com/bid/12407

http://www.mozilla.org/security/announce/mfsa2005-12.html

Patch

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=265668

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19187

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100046

https://nvd.nist.gov/vuln/detail/CVE-2005-0150

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0150

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0150

EUVD