CVE

Id
13467  
CVE No.
CVE-2005-2261  
Status
Candidate  
Description
Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.  
Phase
Assigned (20050713)  
Votes
None (candidate not yet proposed)  
Comments