CVE

Id
11607  
CVE No.
CVE-2005-0401  
Status
Candidate  
Description
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."  
Phase
Assigned (20050214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
83042 11607 CVE-2005-0401 BUGTRAQ:20050324 Firescrolling 2 [Firefox 1.0.1]  View
83043 11607 CVE-2005-0401 URL:http://marc.info/?l=bugtraq&m=111168413007891&w=2  View
83044 11607 CVE-2005-0401 MISC:http://mikx.de/firescrolling2/  View
83045 11607 CVE-2005-0401 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-32.html  View
83046 11607 CVE-2005-0401 GENTOO:GLSA-200503-30  View
83047 11607 CVE-2005-0401 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml  View
83048 11607 CVE-2005-0401 HP:HPSBUX01133  View
83049 11607 CVE-2005-0401 HP:SSRT5940  View
83050 11607 CVE-2005-0401 REDHAT:RHSA-2005:335  View
83051 11607 CVE-2005-0401 URL:http://www.redhat.com/support/errata/RHSA-2005-335.html  View
83052 11607 CVE-2005-0401 REDHAT:RHSA-2005:336  View
83053 11607 CVE-2005-0401 URL:http://www.redhat.com/support/errata/RHSA-2005-336.html  View
83054 11607 CVE-2005-0401 REDHAT:RHSA-2005:384  View
83055 11607 CVE-2005-0401 URL:http://www.redhat.com/support/errata/RHSA-2005-384.html  View
83056 11607 CVE-2005-0401 OVAL:oval:org.mitre.oval:def:9650  View
83057 11607 CVE-2005-0401 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9650  View
83058 11607 CVE-2005-0401 VUPEN:ADV-2005-0296  View
83059 11607 CVE-2005-0401 URL:http://www.vupen.com/english/advisories/2005/0296  View
83060 11607 CVE-2005-0401 OVAL:oval:org.mitre.oval:def:100026  View
83061 11607 CVE-2005-0401 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100026  View
83062 11607 CVE-2005-0401 SECUNIA:14654  View
83063 11607 CVE-2005-0401 URL:http://secunia.com/advisories/14654  View
83064 11607 CVE-2005-0401 BID:12885  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61800 JVNDB-2005-000002 Linux Kernel における tty の不適切な処理によるサービス運用妨害 (Dos) の脆弱性 Linux Kernel には、NPTL の実装において、解放された tty 構造体へのポインタの処理が不適切である脆弱性が存在します。 CVE-2005-0403 11607 7.2 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000002.html  View