CVE

Id
11436  
CVE No.
CVE-2005-0230  
Status
Candidate  
Description
Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka "firedragging."  
Phase
Assigned (20050207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81512 11436 CVE-2005-0230 BUGTRAQ:20050207 Firedragging [Firefox 1.0]  View
81513 11436 CVE-2005-0230 URL:http://marc.info/?l=bugtraq&m=110780995232064&w=2  View
81514 11436 CVE-2005-0230 MISC:http://www.mikx.de/firedragging/  View
81515 11436 CVE-2005-0230 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=279945  View
81516 11436 CVE-2005-0230 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-25.html  View
81517 11436 CVE-2005-0230 GENTOO:GLSA-200503-10  View
81518 11436 CVE-2005-0230 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml  View
81519 11436 CVE-2005-0230 GENTOO:GLSA-200503-30  View
81520 11436 CVE-2005-0230 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml  View
81521 11436 CVE-2005-0230 SUSE:SUSE-SA:2006:022  View
81522 11436 CVE-2005-0230 URL:http://www.novell.com/linux/security/advisories/2006_04_25.html  View
81523 11436 CVE-2005-0230 BID:12468  View
81524 11436 CVE-2005-0230 URL:http://www.securityfocus.com/bid/12468  View
81525 11436 CVE-2005-0230 OVAL:oval:org.mitre.oval:def:100033  View
81526 11436 CVE-2005-0230 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100033  View
81527 11436 CVE-2005-0230 SECUNIA:19823  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61936 JVNDB-2005-000138 Mozilla Firefox の about:config における真偽値を改ざんされる脆弱性 ------------ CVE-2005-0232 11436 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000138.html  View