CVE

Id
11437  
CVE No.
CVE-2005-0231  
Status
Candidate  
Description
Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."  
Phase
Assigned (20050207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81528 11437 CVE-2005-0231 BUGTRAQ:20050207 Firetabbing [Firefox 1.0]  View
81529 11437 CVE-2005-0231 URL:http://marc.info/?l=bugtraq&m=110781134617144&w=2  View
81530 11437 CVE-2005-0231 MISC:http://www.mikx.de/firetabbing/  View
81531 11437 CVE-2005-0231 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=280056  View
81532 11437 CVE-2005-0231 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-26.html  View
81533 11437 CVE-2005-0231 GENTOO:GLSA-200503-10  View
81534 11437 CVE-2005-0231 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml  View
81535 11437 CVE-2005-0231 GENTOO:GLSA-200503-30  View
81536 11437 CVE-2005-0231 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml  View
81537 11437 CVE-2005-0231 REDHAT:RHSA-2005:176  View
81538 11437 CVE-2005-0231 URL:http://www.redhat.com/support/errata/RHSA-2005-176.html  View
81539 11437 CVE-2005-0231 REDHAT:RHSA-2005:384  View
81540 11437 CVE-2005-0231 URL:http://www.redhat.com/support/errata/RHSA-2005-384.html  View
81541 11437 CVE-2005-0231 SUSE:SUSE-SA:2005:016  View
81542 11437 CVE-2005-0231 URL:http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html  View
81543 11437 CVE-2005-0231 OVAL:oval:org.mitre.oval:def:100032  View
81544 11437 CVE-2005-0231 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100032  View
81545 11437 CVE-2005-0231 OVAL:oval:org.mitre.oval:def:10079  View
81546 11437 CVE-2005-0231 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10079  View
81547 11437 CVE-2005-0231 XF:mozilla-firefox-tab-gain-access(19264)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61937 JVNDB-2005-000139 Mozilla 製品における国際化ドメイン名 (IDN) を利用してドメイン名を偽装される脆弱性 ------------ CVE-2005-0233 11437 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000139.html  View