PT-2005-2171

CVE-2005-1155

Publicado

2005-04-18

Atualizado

2017-10-11

Descrição por

CVSS 2.0

7.5

Alta

MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 1.0.3 Mozilla Suite versions prior to 1.7.7

Description The issue allows remote attackers to execute arbitrary code via a tag with a javascript: URL in the href attribute. This is related to the favicon functionality.

Recommendations For Firefox versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue. For Mozilla Suite versions prior to 1.7.7, update to version 1.7.7 or later to resolve the issue.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Michael Krax

Mikx

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

Identificadores relacionados