NVD

Id
65995  
Name
CVE-2005-0231  
Description
Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-02-07  
Modified Date
2017-07-10  
Seq
2005-0231  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
343825 65995 CVE-2005-0231 20050207 Firetabbing [Firefox 1.0]  View
343826 65995 CVE-2005-0231 oval:org.mitre.oval:def:100032  View
343827 65995 CVE-2005-0231 oval:org.mitre.oval:def:10079  View
343828 65995 CVE-2005-0231 GLSA-200503-10  View
343829 65995 CVE-2005-0231 GLSA-200503-30  View
343830 65995 CVE-2005-0231 http://www.mikx.de/firetabbing/  View
343831 65995 CVE-2005-0231 http://www.mozilla.org/security/announce/mfsa2005-26.html  View
343832 65995 CVE-2005-0231 SUSE-SA:2005:016  View
343833 65995 CVE-2005-0231 RHSA-2005:176  View
343834 65995 CVE-2005-0231 RHSA-2005:384  View
343835 65995 CVE-2005-0231 mozilla-firefox-tab-gain-access(19264)  View
343836 65995 CVE-2005-0231 https://bugzilla.mozilla.org/show_bug.cgi?id=280056  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61935 JVNDB-2005-000137 Mozilla 製品における javascript: または data: 形式の URI のリンクによるクロスサイトスクリプティングの脆弱性 ------------ CVE-2005-0231 11435 CVE-2005-0231 65995 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000137.html 2005-02-24 2007-04-01 View