CVE

Id
11351  
CVE No.
CVE-2005-0145  
Status
Candidate  
Description
Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.  
Phase
Assigned (20050125)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
80664 11351 CVE-2005-0145 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-07.html  View
80665 11351 CVE-2005-0145 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=265176  View
80666 11351 CVE-2005-0145 BID:12407  View
80667 11351 CVE-2005-0145 URL:http://www.securityfocus.com/bid/12407  View
80668 11351 CVE-2005-0145 OVAL:oval:org.mitre.oval:def:100051  View
80669 11351 CVE-2005-0145 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100051  View
80670 11351 CVE-2005-0145 XF:mozilla-script-click-event-bypass(19170)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62917 JVNDB-2004-000259 Mozilla 製品における NTLM や SPNEGO の証明書情報が漏洩する脆弱性 ------------ CVE-2005-0147 11351 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000259.html  View