NVD

Id
67963  
Name
CVE-2005-2261  
Description
Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-07-13  
Modified Date
2011-03-07  
Seq
2005-2261  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
351416 67963 CVE-2005-2261 oval:org.mitre.oval:def:100012  View
351417 67963 CVE-2005-2261 oval:org.mitre.oval:def:10947  View
351418 67963 CVE-2005-2261 oval:org.mitre.oval:def:1348  View
351419 67963 CVE-2005-2261 oval:org.mitre.oval:def:808  View
351420 67963 CVE-2005-2261 P-252  View
351421 67963 CVE-2005-2261 DSA-810  View
351422 67963 CVE-2005-2261 http://www.mozilla.org/security/announce/mfsa2005-46.html  View
351423 67963 CVE-2005-2261 http://www.networksecurity.fi/advisories/netscape-multiple-issues.html  View
351424 67963 CVE-2005-2261 SUSE-SR:2005:018  View
351425 67963 CVE-2005-2261 SUSE-SA:2005:045  View
351426 67963 CVE-2005-2261 SUSE-SA:2006:004  View
351427 67963 CVE-2005-2261 RHSA-2005:586  View
351428 67963 CVE-2005-2261 RHSA-2005:587  View
351429 67963 CVE-2005-2261 RHSA-2005:601  View
351430 67963 CVE-2005-2261 14242  View
351431 67963 CVE-2005-2261 ADV-2005-1075  View
351432 67963 CVE-2005-2261 https://bugzilla.mozilla.org/show_bug.cgi?id=292589  View
351433 67963 CVE-2005-2261 https://bugzilla.mozilla.org/show_bug.cgi?id=292591  View
351434 67963 CVE-2005-2261 FLSA:160202  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62227 JVNDB-2005-000429 Mozilla 製品の XBL コンテンツの解析処理における JavaScript の実行制限を回避される脆弱性 Mozilla Firefox 、Mozilla および Thunderbird には、XBL コンテンツをロードする際のチェックに不備が存在するため、JavaScript が無効に設定されている場合であっても、HTML コンテンツに含まれる XBL コンテンツ内のスクリプトが実行されてしまう脆弱性が存在します。 CVE-2005-2261 13465 CVE-2005-2261 67963 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000429.html 2005-07-12 2007-04-01 View