CVEvulnerability
CVE-2005-0591
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."
Affected configurations
• mozilla firefox 0.8
• mozilla firefox 0.9
• mozilla firefox 0.9.1
• mozilla firefox 0.9.2
• mozilla firefox 0.9.3
• mozilla firefox 0.10
• mozilla firefox 0.10.1
• mozilla firefox 1.0
References
- http://marc.info/?l=bugtraq&m=110547286002188&w=2 marc.info
- http://secunia.com/advisories/13786 secunia.com
- http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml Patch, Vendor Advisory
- http://www.mikx.de/firespoofing/ Exploit
- http://www.mikx.de/index.php?p=7 Vendor Advisory
- http://www.mozilla.org/security/announce/mfsa2005-16.html www.mozilla.org
- http://www.redhat.com/support/errata/RHSA-2005-176.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-384.html www.redhat.com
- http://www.securityfocus.com/bid/12234 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=260560 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18864 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039 oval.cisecurity.org
- http://marc.info/?l=bugtraq&m=110547286002188&w=2 marc.info
- http://secunia.com/advisories/13786 secunia.com
- http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml Patch, Vendor Advisory
- http://www.mikx.de/firespoofing/ Exploit
- http://www.mikx.de/index.php?p=7 Vendor Advisory
- http://www.mozilla.org/security/announce/mfsa2005-16.html www.mozilla.org
- http://www.redhat.com/support/errata/RHSA-2005-176.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-384.html www.redhat.com
- http://www.securityfocus.com/bid/12234 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=260560 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18864 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039 oval.cisecurity.org