CVE-2005-0527Mozilla Firefox vulnerability

9 documents4 sources
Severity
5.1MEDIUMNVD
EPSS
4.7%
top 10.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 2
Latest updateMay 1

Description

Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."

CVSS vector

AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4

Affected Packages2 packages

NVDmozilla/firefox8 versions+7
NVDmozilla/mozilla11 versions+10

Patches

🔴Vulnerability Details

2
GHSA
GHSA-pf89-5576-c2q8: Firefox 12022-05-01
GHSA
GHSA-p4xc-fq3x-cx45: FireFox 12022-05-01

📋Vendor Advisories

2
Red Hat
security flaw2005-03-23
Red Hat
security flaw2005-02-25

💬Community

2
Bugzilla
CVE-2005-0401 security flaw2018-08-16
Bugzilla
CVE-2005-0527 security flaw2018-08-16