CVE-2005-0584 — Mozilla Firefox vulnerability

6 documents6 sources
Severity
2.6LOWNVD
EPSS
0.6%
top 31.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla FirefoxMozilla
Timeline
PublishedMay 2
Latest updateMay 1

Description

Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages2 packages

▶NVDmozilla/firefox8 versions+7
▶NVDmozilla/mozilla11 versions+10

Patches

Patch: www.gentoo.org ↗Patch: bugzilla.mozilla.org ↗Patch: www.gentoo.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-v9x2-68hw-cwxx: Firefox before 1↗2022-05-01
▶
CVEList
CVE-2005-0584: Firefox before 1↗2005-02-28
▶

📋Vendor Advisories

2
Ubuntu
Ubuntu 4.10 update for Firefox vulnerabilities↗2005-07-28
▶
Red Hat
security flaw↗2005-02-24
▶

💬Community

1
Bugzilla
CVE-2005-0584 security flaw↗2018-08-16
▶