Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-2261
HistoryJul 13, 2005 - 4:00 a.m.

CVE-2005-2261

2005-07-1304:00:00
[email protected]
web.nvd.nist.gov
8

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

High

EPSS

0.044

Percentile

92.4%

JSON

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.

Affected configurations

Nvd
Node
mozillafirefoxMatch0.8
OR
mozillafirefoxMatch0.9
OR
mozillafirefoxMatch0.9rc
OR
mozillafirefoxMatch0.9.1
OR
mozillafirefoxMatch0.9.2
OR
mozillafirefoxMatch0.9.3
OR
mozillafirefoxMatch0.10
OR
mozillafirefoxMatch0.10.1
OR
mozillafirefoxMatch1.0
OR
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillafirefoxMatch1.0.3
OR
mozillafirefoxMatch1.0.4
OR
mozillamozillaMatch1.3
OR
mozillamozillaMatch1.4
OR
mozillamozillaMatch1.4alpha
OR
mozillamozillaMatch1.4.1
OR
mozillamozillaMatch1.5
OR
mozillamozillaMatch1.5alpha
OR
mozillamozillaMatch1.5rc1
OR
mozillamozillaMatch1.5rc2
OR
mozillamozillaMatch1.5.1
OR
mozillamozillaMatch1.6
OR
mozillamozillaMatch1.6alpha
OR
mozillamozillaMatch1.6beta
OR
mozillamozillaMatch1.7
OR
mozillamozillaMatch1.7alpha
OR
mozillamozillaMatch1.7beta
OR
mozillamozillaMatch1.7rc1
OR
mozillamozillaMatch1.7rc2
OR
mozillamozillaMatch1.7rc3
OR
mozillamozillaMatch1.7.1
OR
mozillamozillaMatch1.7.2
OR
mozillamozillaMatch1.7.3
OR
mozillamozillaMatch1.7.5
OR
mozillamozillaMatch1.7.6
OR
mozillamozillaMatch1.7.7
OR
mozillamozillaMatch1.7.8
OR
mozillathunderbirdMatch0.1
OR
mozillathunderbirdMatch0.2
OR
mozillathunderbirdMatch0.3
OR
mozillathunderbirdMatch0.4
OR
mozillathunderbirdMatch0.5
OR
mozillathunderbirdMatch0.6
OR
mozillathunderbirdMatch0.7
OR
mozillathunderbirdMatch0.7.1
OR
mozillathunderbirdMatch0.7.2
OR
mozillathunderbirdMatch0.7.3
OR
mozillathunderbirdMatch0.8
OR
mozillathunderbirdMatch0.9
OR
mozillathunderbirdMatch1.0
OR
mozillathunderbirdMatch1.0.1
OR
mozillathunderbirdMatch1.0.2
OR
mozillathunderbirdMatch1.0.3
OR
mozillathunderbirdMatch1.0.4
VendorProductVersionCPE
mozillafirefox0.8cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*
mozillafirefox0.9cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*
mozillafirefox0.9cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*
mozillafirefox0.9.1cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*
mozillafirefox0.9.2cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*
mozillafirefox0.9.3cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*
mozillafirefox0.10cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*
mozillafirefox0.10.1cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*
mozillafirefox1.0cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*
mozillafirefox1.0.1cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 551

References

Related

cve 1
cvelist 1
securityvulns 1
ubuntucve 1
nessus 26
openvas 14
ubuntu 4
redhat 3
osv 4
centos 4
debian 8
freebsd 1
suse 3
cve
cve
CVE-2005-2261
2005-07-13 04:00:00
cvelist
cvelist
CVE-2005-2261
2005-07-13 04:00:00
securityvulns
securityvulns
[NEWS] XBL Implementation Allows Script Execution (Gecko)
2005-07-27 00:00:00
ubuntucve
ubuntucve
CVE-2005-2261
2005-07-13 00:00:00
nessus
nessus
MDKSA-2005:127-1 : mozilla-thunderbird
2006-01-15 00:00:00
Ubuntu 4.10 / 5.04 : mozilla-thunderbird vulnerabilities (USN-157-1)
2006-01-15 00:00:00
RHEL 4 : thunderbird (RHSA-2005:601)
2005-07-22 00:00:00
openvas
openvas
Debian Security Advisory DSA 781-1 (mozilla-thunderbird)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-781-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 810-1 (mozilla)
2008-01-17 00:00:00
ubuntu
ubuntu
Mozilla Thunderbird vulnerabilities
2005-08-01 00:00:00
Firefox vulnerabilities
2005-07-21 00:00:00
Mozilla vulnerabilities
2005-07-27 00:00:00
redhat
redhat
(RHSA-2005:601) thunderbird security update
2005-07-21 00:00:00
(RHSA-2005:587) mozilla security update
2005-07-22 00:00:00
(RHSA-2005:586) firefox security update
2005-07-21 00:00:00
osv
osv
mozilla-thunderbird - several
2005-08-23 00:00:00
mozilla - several
2005-09-13 00:00:00
mozilla-firefox - several
2005-08-20 00:00:00
centos
centos
thunderbird security update
2005-07-22 15:22:09
devhelp, mozilla security update
2005-07-22 15:23:45
galeon, mozilla security update
2005-07-25 01:17:58
debian
debian
[SECURITY] [DSA 781-1] New Mozilla Thunderbird packages fix several vulnerabilities
2005-08-23 09:40:29
[SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities
2005-09-13 12:55:40
[SECURITY] [DSA 779-2] New Mozilla Firefox packages fix several vulnerabilities
2005-09-01 14:06:47
freebsd
freebsd
firefox & mozilla -- multiple vulnerabilities
2005-07-12 00:00:00
suse
suse
information leak in mozilla,MozillaFirefox,epiphany,galeon
2005-08-11 15:28:02
remote code execution in MozillaThunderbird
2006-04-25 13:15:04
remote code execution in phpMyAdmin
2006-01-26 13:53:52

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

High

EPSS

0.044

Percentile

92.4%

JSON
Related for NVD:CVE-2005-2261
cve1cvelist1securityvulns1ubuntucve1nessus26openvas14ubuntu4redhat3osv4centos4debian8freebsd1suse3