5.1

CVE-2005-0401

Exploit
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version0.8
Mozilla ≫ Firefox Version0.9
Mozilla ≫ Firefox Version0.9 Updaterc
Mozilla ≫ Firefox Version0.9.1
Mozilla ≫ Firefox Version0.9.2
Mozilla ≫ Firefox Version0.9.3
Mozilla ≫ Firefox Version0.10
Mozilla ≫ Firefox Version0.10.1
Mozilla ≫ Firefox Version1.0
Mozilla ≫ Mozilla Version1.3
Mozilla ≫ Mozilla Version1.4
Mozilla ≫ Mozilla Version1.4 Updatealpha
Mozilla ≫ Mozilla Version1.4.1
Mozilla ≫ Mozilla Version1.5
Mozilla ≫ Mozilla Version1.5 Updatealpha
Mozilla ≫ Mozilla Version1.5 Updaterc1
Mozilla ≫ Mozilla Version1.5 Updaterc2
Mozilla ≫ Mozilla Version1.5.1
Mozilla ≫ Mozilla Version1.6
Mozilla ≫ Mozilla Version1.6 Updatealpha
Mozilla ≫ Mozilla Version1.6 Updatebeta
Mozilla ≫ Mozilla Version1.7
Mozilla ≫ Mozilla Version1.7 Updatealpha
Mozilla ≫ Mozilla Version1.7 Updatebeta
Mozilla ≫ Mozilla Version1.7 Updaterc1
Mozilla ≫ Mozilla Version1.7 Updaterc2
Mozilla ≫ Mozilla Version1.7 Updaterc3
Mozilla ≫ Mozilla Version1.7.1
Mozilla ≫ Mozilla Version1.7.2
Mozilla ≫ Mozilla Version1.7.3
Mozilla ≫ Mozilla Version1.7.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.31% 0.87
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.redhat.com/support/errata/RHSA-2005-335.html
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-384.html
http://secunia.com/advisories/14654
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-336.html
Vendor Advisory
http://www.vupen.com/english/advisories/2005/0296
http://marc.info/?l=bugtraq&m=111168413007891&w=2
http://mikx.de/firescrolling2/
Exploit
http://www.mozilla.org/security/announce/mfsa2005-32.html
http://www.securityfocus.com/bid/12885
Patch
Exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100026
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9650