CVE

Id
9333  
CVE No.
CVE-2004-0905  
Status
Candidate  
Description
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.  
Phase
Assigned (20040923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62045 9333 CVE-2004-0905 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3  View
62046 9333 CVE-2004-0905 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=250862  View
62047 9333 CVE-2004-0905 FEDORA:FLSA:2089  View
62048 9333 CVE-2004-0905 URL:http://marc.info/?l=bugtraq&m=109900315219363&w=2  View
62049 9333 CVE-2004-0905 GENTOO:GLSA-200409-26  View
62050 9333 CVE-2004-0905 URL:http://security.gentoo.org/glsa/glsa-200409-26.xml  View
62051 9333 CVE-2004-0905 HP:SSRT4826  View
62052 9333 CVE-2004-0905 URL:http://marc.info/?l=bugtraq&m=109698896104418&w=2  View
62053 9333 CVE-2004-0905 SUSE:SUSE-SA:2004:036  View
62054 9333 CVE-2004-0905 URL:http://www.novell.com/linux/security/advisories/2004_36_mozilla.html  View
62055 9333 CVE-2004-0905 CERT:TA04-261A  View
62056 9333 CVE-2004-0905 URL:http://www.us-cert.gov/cas/techalerts/TA04-261A.html  View
62057 9333 CVE-2004-0905 CERT-VN:VU#651928  View
62058 9333 CVE-2004-0905 URL:http://www.kb.cert.org/vuls/id/651928  View
62059 9333 CVE-2004-0905 BID:11177  View
62060 9333 CVE-2004-0905 URL:http://www.securityfocus.com/bid/11177  View
62061 9333 CVE-2004-0905 OVAL:oval:org.mitre.oval:def:10378  View
62062 9333 CVE-2004-0905 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10378  View
62063 9333 CVE-2004-0905 XF:mozilla-netscape-sameorigin-bypass(17374)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63057 JVNDB-2004-000399 Mozilla 製品の XPInstall における不適切なパーミッション設定の問題 Mozilla 製品には、Linux 版インストーラが不適切なファイルパーミッションを与えて特定のファイルを作成してしまう問題があります。 CVE-2004-0906 9333 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000399.html  View