CVE-2005-0150: Medium severity Mozilla Firefox vulnerability
Published Jan 29, 2005
·Updated
Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code.
Affected Software
9 affected components
Mozilla Firefox=0.8
Mozilla Firefox=0.9
Mozilla Firefox=0.9-rc
Mozilla Firefox=0.9.1
Mozilla Firefox=0.9.2
Mozilla Firefox=0.9.3
Mozilla Firefox=0.10
Mozilla Firefox=0.10.1
Mozilla Firefox=1.0
Remediation
Patch Available
Patch Available
Event History
Jan 29, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0150?
CVE-2005-0150 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2005-0150?
To fix CVE-2005-0150, upgrade to Mozilla Firefox version 1.0 or later.
3
What versions of Firefox are affected by CVE-2005-0150?
CVE-2005-0150 affects Firefox versions 0.8, 0.9, and 1.0.
4
What kind of attack can exploit CVE-2005-0150?
CVE-2005-0150 can be exploited by an attacker to execute arbitrary JavaScript code in the context of another page.
5
Is CVE-2005-0150 still relevant for users today?
While CVE-2005-0150 is an older vulnerability, users of outdated Firefox versions may still be at risk.