CVE-2005-0231
N/A
Published: February 8, 2005 at 05:00 AM UTC
Updated: June 16, 2026 at 10:10 PM UTC
1 product affected across 1 vendorFirefox
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (12)
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=110781134617144&w=2Vendor Advisoryx_refsource_GENTOOExploitPatch
Source: [email protected]
http://www.gentoo.org/security/en/glsa/glsa-200503-10.xmlVendor Advisoryx_refsource_GENTOOExploitPatch
Source: [email protected]
http://www.gentoo.org/security/en/glsa/glsa-200503-30.xmlx_refsource_CONFIRMExploitPatchVendor Advisory
Source: [email protected]
http://www.mozilla.org/security/announce/mfsa2005-26.htmlVendor Advisoryx_refsource_SUSEExploitPatch
Source: [email protected]
http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://www.redhat.com/support/errata/RHSA-2005-176.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://www.redhat.com/support/errata/RHSA-2005-384.htmlQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card