NVD

Id
67971  
Name
CVE-2005-2269  
Description
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-07-13  
Modified Date
2011-03-07  
Seq
2005-2269  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
351535 67971 CVE-2005-2269 oval:org.mitre.oval:def:100004  View
351536 67971 CVE-2005-2269 oval:org.mitre.oval:def:100005  View
351537 67971 CVE-2005-2269 oval:org.mitre.oval:def:100011  View
351538 67971 CVE-2005-2269 oval:org.mitre.oval:def:1258  View
351539 67971 CVE-2005-2269 oval:org.mitre.oval:def:729  View
351540 67971 CVE-2005-2269 oval:org.mitre.oval:def:9777  View
351541 67971 CVE-2005-2269 P-252  View
351542 67971 CVE-2005-2269 DSA-810  View
351543 67971 CVE-2005-2269 http://www.mozilla.org/security/announce/mfsa2005-55.html  View
351544 67971 CVE-2005-2269 http://www.networksecurity.fi/advisories/netscape-multiple-issues.html  View
351545 67971 CVE-2005-2269 SUSE-SR:2005:018  View
351546 67971 CVE-2005-2269 SUSE-SA:2005:045  View
351547 67971 CVE-2005-2269 SUSE-SA:2006:004  View
351548 67971 CVE-2005-2269 RHSA-2005:586  View
351549 67971 CVE-2005-2269 RHSA-2005:587  View
351550 67971 CVE-2005-2269 RHSA-2005:601  View
351551 67971 CVE-2005-2269 14242  View
351552 67971 CVE-2005-2269 ADV-2005-1075  View
351553 67971 CVE-2005-2269 https://bugzilla.mozilla.org/show_bug.cgi?id=298892  View
351554 67971 CVE-2005-2269 FLSA:160202  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62234 JVNDB-2005-000436 Mozilla Firefox の XHTML ノード名の処理における任意のスクリプトを実行される脆弱性 ------------ CVE-2005-2269 13473 CVE-2005-2269 67971 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000436.html 2005-07-12 2007-04-01 View