NVD

Id
66904  
Name
CVE-2005-1155  
Description
The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2010-08-21  
Seq
2005-1155  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
347362 66904 CVE-2005-1155 SCOSA-2005.49  View
347363 66904 CVE-2005-1155 oval:org.mitre.oval:def:100021  View
347364 66904 CVE-2005-1155 oval:org.mitre.oval:def:10655  View
347365 66904 CVE-2005-1155 GLSA-200504-18  View
347366 66904 CVE-2005-1155 VU#973309  View
347367 66904 CVE-2005-1155 http://www.mikx.de/firelinking/  View
347368 66904 CVE-2005-1155 http://www.mozilla.org/security/announce/mfsa2005-37.html  View
347369 66904 CVE-2005-1155 RHSA-2005:383  View
347370 66904 CVE-2005-1155 RHSA-2005:384  View
347371 66904 CVE-2005-1155 RHSA-2005:386  View
347372 66904 CVE-2005-1155 13216  View
347373 66904 CVE-2005-1155 15495  View
347374 66904 CVE-2005-1155 https://bugzilla.mozilla.org/show_bug.cgi?id=290036  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62014 JVNDB-2005-000216 Mozilla 製品の favicon 機能における任意のコードを実行される脆弱性 ------------ CVE-2005-1155 12359 CVE-2005-1155 66904 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000216.html 2005-03-31 2007-04-01 View