CVE-2005-0143: Low severity Mozilla Firefox vulnerability
Published Jan 29, 2005
·Updated
Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.
Affected Software
62 affected components
Mozilla Firefox=0.8
Mozilla Firefox=0.9
Mozilla Firefox=0.9-rc
Mozilla Firefox=0.9.1
Mozilla Firefox=0.9.2
Mozilla Firefox=0.9.3
Mozilla Firefox=0.10
Mozilla Firefox=0.10.1
Mozilla Firefox=1.0
Mozilla Mozilla
Mozilla Mozilla=0.8
Mozilla Mozilla=0.9.2
Mozilla Mozilla=0.9.2.1
Mozilla Mozilla=0.9.3
Mozilla Mozilla=0.9.4
Mozilla Mozilla=0.9.4.1
Mozilla Mozilla=0.9.5
Mozilla Mozilla=0.9.6
Mozilla Mozilla=0.9.7
Mozilla Mozilla=0.9.8
Mozilla Mozilla=0.9.9
Mozilla Mozilla=0.9.35
Mozilla Mozilla=0.9.48
Mozilla Mozilla=1.0
Mozilla Mozilla=1.0-rc1
Mozilla Mozilla=1.0-rc2
Mozilla Mozilla=1.0.1
Mozilla Mozilla=1.0.2
Mozilla Mozilla=1.1
Mozilla Mozilla=1.1-alpha
Mozilla Mozilla=1.1-beta
Mozilla Mozilla=1.2
Mozilla Mozilla=1.2-alpha
Mozilla Mozilla=1.2-beta
Mozilla Mozilla=1.2.1
Mozilla Mozilla=1.3
Mozilla Mozilla=1.3.1
Mozilla Mozilla=1.4
Mozilla Mozilla=1.4-alpha
Mozilla Mozilla=1.4-beta
Mozilla Mozilla=1.4.1
Mozilla Mozilla=1.4.2
Mozilla Mozilla=1.4.4
Mozilla Mozilla=1.5
Mozilla Mozilla=1.5-alpha
Mozilla Mozilla=1.5-rc1
Mozilla Mozilla=1.5-rc2
Mozilla Mozilla=1.5.1
Mozilla Mozilla=1.6
Mozilla Mozilla=1.6-alpha
Mozilla Mozilla=1.6-beta
Mozilla Mozilla=1.7
Mozilla Mozilla=1.7-alpha
Mozilla Mozilla=1.7-beta
Mozilla Mozilla=1.7-rc1
Mozilla Mozilla=1.7-rc2
Mozilla Mozilla=1.7-rc3
Mozilla Mozilla=1.7.1
Mozilla Mozilla=1.7.2
Mozilla Mozilla=1.7.3
Mozilla Mozilla=1.7.5
Mozilla Mozilla=1.8-alpha2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jan 29, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0143?
CVE-2005-0143 is considered a medium severity vulnerability that could facilitate phishing attacks.
2
How do I fix CVE-2005-0143?
To address CVE-2005-0143, upgrade to a version of Firefox or Mozilla that is 1.0 or later or 1.7.5 or later.
3
What versions are affected by CVE-2005-0143?
CVE-2005-0143 affects Firefox versions prior to 1.0 and Mozilla versions prior to 1.7.5.
4
What type of vulnerability is CVE-2005-0143?
CVE-2005-0143 is a security vulnerability related to improper SSL lock icon representation.
5
Could CVE-2005-0143 lead to data exposure?
Yes, CVE-2005-0143 could lead to data exposure by allowing users to perceive insecure pages as secure.