CVE-2005-0401: Medium severity Mozilla Firefox vulnerability
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0401?
CVE-2005-0401 is categorized as a critical vulnerability due to its potential to execute arbitrary XUL code remotely.
How do I fix CVE-2005-0401?
To remediate CVE-2005-0401, you should update affected Mozilla and Firefox versions to the latest available releases.
What types of software are affected by CVE-2005-0401?
CVE-2005-0401 affects various versions of Mozilla browsers and Firefox up to version 1.0.1.
What kind of attacks does CVE-2005-0401 enable?
CVE-2005-0401 allows remote attackers to hijack drag and drop events, leading to the execution of malicious XUL code.
Is CVE-2005-0401 still a risk today?
While CVE-2005-0401 is primarily a historical vulnerability, using outdated software versions may still pose security risks.