CVE-2005-1155 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-1155
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-1155

Description: The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking."

CVE Status: Candidate

References: SCO SAID Secunia Advisory: SA14938 Secunia Advisory: SA14992 REDHAT http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.redhat.com/support/errata/RHSA-2005-386.html http://www.redhat.com/support/errata/RHSA-2005-383.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100021 MISC http://www.mikx.de/firelinking/ GENTOO http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml CONFIRM http://www.mozilla.org/security/announce/mfsa2005-37.html CERT-VN 973309 BID 15495 13216

Return to the previous page.