CVE-2005-1155

2005-05-0204:00:00

CWE-94

[email protected]

web.nvd.nist.gov

nvd

cve-2005-1155

firelinking

firefox

mozilla suite

arbitrary code execution

security vulnerability

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.923 High

EPSS

Percentile

98.9%

JSON

The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel=“icon”> tag with a javascript: URL in the href attribute, aka “Firelinking.”

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxeq0.8
mozilla:mozillamozillaeq1.7
mozilla:mozillamozillaeq1.5
mozilla:firefoxmozilla firefoxeq1.0.2
mozilla:firefoxmozilla firefoxeq0.9.1
mozilla:mozillamozillaeq1.7.5
mozilla:firefoxmozilla firefoxeq0.10.1
mozilla:firefoxmozilla firefoxeq0.9
mozilla:mozillamozillaeq1.6
mozilla:mozillamozillaeq1.4.1

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	eq	0.8
mozilla:mozilla	mozilla	eq	1.7
mozilla:mozilla	mozilla	eq	1.5
mozilla:firefox	mozilla firefox	eq	1.0.2
mozilla:firefox	mozilla firefox	eq	0.9.1
mozilla:mozilla	mozilla	eq	1.7.5
mozilla:firefox	mozilla firefox	eq	0.10.1
mozilla:firefox	mozilla firefox	eq	0.9
mozilla:mozilla	mozilla	eq	1.6
mozilla:mozilla	mozilla	eq	1.4.1