|
|
CVE Reference: CVE-2005-1155 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2005-1155 |
|
|
Description: The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking." |
|
|
CVE Status: Candidate |
|
|
References: SCO SAID Secunia Advisory: SA14938 Secunia Advisory: SA14992 REDHAT http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.redhat.com/support/errata/RHSA-2005-383.html http://www.redhat.com/support/errata/RHSA-2005-386.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10655 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100021 MISC http://www.mikx.de/firelinking/ GENTOO http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml CONFIRM http://www.mozilla.org/security/announce/mfsa2005-37.html CERT-VN 973309 BID 15495 13216 |
|
| Return to the previous page. |
