CVE-2005-2262: Medium severity Mozilla Firefox vulnerability

Published Jul 13, 2005

Updated

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."

Affected Software

2 affected components

Mozilla Firefox=1.0.3

Mozilla Firefox=1.0.4

Event History

Jul 13, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2262?

CVE-2005-2262 is classified as critical due to its potential for remote code execution.

How do I fix CVE-2005-2262?

To mitigate CVE-2005-2262, users should upgrade to a more secure version of Firefox or Netscape that is not affected by this vulnerability.

Which versions of Firefox are affected by CVE-2005-2262?

CVE-2005-2262 affects Firefox versions 1.0.3 and 1.0.4.

Can CVE-2005-2262 be exploited by any remote attacker?

Yes, CVE-2005-2262 can be exploited by remote attackers through malicious image URLs.

What type of vulnerability is CVE-2005-2262?

CVE-2005-2262 is a JavaScript injection vulnerability that allows execution of arbitrary code.