CVE-2005-0585: Low severity Mozilla Firefox vulnerability
Published Feb 28, 2005
·Updated
Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks.
Affected Software
31 affected components
Mozilla Firefox=0.8
Mozilla Firefox=0.9
Mozilla Firefox=0.9-rc
Mozilla Firefox=0.9.1
Mozilla Firefox=0.9.2
Mozilla Firefox=0.9.3
Mozilla Firefox=0.10
Mozilla Firefox=0.10.1
Mozilla Firefox=1.0
Mozilla Mozilla=1.3
Mozilla Mozilla=1.4
Mozilla Mozilla=1.4-alpha
Mozilla Mozilla=1.4.1
Mozilla Mozilla=1.5
Mozilla Mozilla=1.5-alpha
Mozilla Mozilla=1.5-rc1
Mozilla Mozilla=1.5-rc2
Mozilla Mozilla=1.5.1
Mozilla Mozilla=1.6
Mozilla Mozilla=1.6-alpha
Mozilla Mozilla=1.6-beta
Mozilla Mozilla=1.7
Mozilla Mozilla=1.7-alpha
Mozilla Mozilla=1.7-beta
Mozilla Mozilla=1.7-rc1
Mozilla Mozilla=1.7-rc2
Mozilla Mozilla=1.7-rc3
Mozilla Mozilla=1.7.1
Mozilla Mozilla=1.7.2
Mozilla Mozilla=1.7.3
Mozilla Mozilla=1.7.5
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Feb 28, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0585?
CVE-2005-0585 has a moderate severity rating as it allows for potential phishing attacks due to URL spoofing.
2
How do I fix CVE-2005-0585?
To fix CVE-2005-0585, upgrade to Firefox 1.0.1 or Mozilla 1.7.6 or later versions.
3
Which versions are affected by CVE-2005-0585?
CVE-2005-0585 affects Firefox versions before 1.0.1 and Mozilla versions before 1.7.6.
4
Can CVE-2005-0585 be exploited remotely?
Yes, CVE-2005-0585 can be exploited by remote malicious websites to spoof legitimate sites.
5
What type of attack does CVE-2005-0585 facilitate?
CVE-2005-0585 facilitates phishing attacks by enabling URL spoofing.