VDB
CVE-2005-0401
CVE-2005-0401
PUBLISHED
Reported by redhat · Published March 24, 2005
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | *, n/a, n/a |
Timeline
- Mar 24, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 14, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
References
- RHSA-2005:336 vendor-advisoryx_refsource_REDHAT
- ADV-2005-0296 vdb-entryx_refsource_VUPEN
- x_refsource_MISC
- RHSA-2005:335 vendor-advisoryx_refsource_REDHAT
- oval:org.mitre.oval:def:9650 vdb-entrysignaturex_refsource_OVAL
- x_refsource_CONFIRM
- 12885 vdb-entryx_refsource_BID
- oval:org.mitre.oval:def:100026 vdb-entrysignaturex_refsource_OVAL
- RHSA-2005:384 vendor-advisoryx_refsource_REDHAT
- GLSA-200503-30 vendor-advisoryx_refsource_GENTOO
- 20050324 Firescrolling 2 [Firefox 1.0.1] mailing-listx_refsource_BUGTRAQ
- 14654 third-party-advisoryx_refsource_SECUNIA