CVE

Id
11796  
CVE No.
CVE-2005-0590  
Status
Candidate  
Description
The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.  
Phase
Assigned (20050228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
84546 11796 CVE-2005-0590 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-17.html  View
84547 11796 CVE-2005-0590 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=268059  View
84548 11796 CVE-2005-0590 GENTOO:GLSA-200503-10  View
84549 11796 CVE-2005-0590 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml  View
84550 11796 CVE-2005-0590 GENTOO:GLSA-200503-30  View
84551 11796 CVE-2005-0590 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml  View
84552 11796 CVE-2005-0590 REDHAT:RHSA-2005:176  View
84553 11796 CVE-2005-0590 URL:http://www.redhat.com/support/errata/RHSA-2005-176.html  View
84554 11796 CVE-2005-0590 REDHAT:RHSA-2005:384  View
84555 11796 CVE-2005-0590 URL:http://www.redhat.com/support/errata/RHSA-2005-384.html  View
84556 11796 CVE-2005-0590 SUSE:SUSE-SA:2006:022  View
84557 11796 CVE-2005-0590 URL:http://www.novell.com/linux/security/advisories/2006_04_25.html  View
84558 11796 CVE-2005-0590 BID:12659  View
84559 11796 CVE-2005-0590 URL:http://www.securityfocus.com/bid/12659  View
84560 11796 CVE-2005-0590 OVAL:oval:org.mitre.oval:def:100041  View
84561 11796 CVE-2005-0590 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100041  View
84562 11796 CVE-2005-0590 OVAL:oval:org.mitre.oval:def:10010  View
84563 11796 CVE-2005-0590 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10010  View
84564 11796 CVE-2005-0590 SECUNIA:19823  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61947 JVNDB-2005-000149 Mozilla 製品の UTF8ToNewUnicode 関数におけるバッファオーバーフローの脆弱性 ------------ CVE-2005-0592 11796 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000149.html  View