CVE-2005-2267: High severity Mozilla Firefox vulnerability

Published Jul 13, 2005

Updated

Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.

Affected Software

13 affected components

Mozilla Firefox=0.8

Mozilla Firefox=0.9

Mozilla Firefox=0.9-rc

Mozilla Firefox=0.9.1

Mozilla Firefox=0.9.2

Mozilla Firefox=0.9.3

Mozilla Firefox=0.10

Mozilla Firefox=0.10.1

Mozilla Firefox=1.0

Mozilla Firefox=1.0.1

Mozilla Firefox=1.0.2

Mozilla Firefox=1.0.3

Mozilla Firefox=1.0.4

Event History

Jul 13, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2267?

CVE-2005-2267 is considered to have a moderate severity level due to the potential for remote code execution.

How do I fix CVE-2005-2267?

To fix CVE-2005-2267, upgrade to Firefox version 1.0.5 or later.

What versions of Firefox are affected by CVE-2005-2267?

CVE-2005-2267 affects Firefox versions 0.8 through 1.0.4.

What risks are associated with CVE-2005-2267?

The risks associated with CVE-2005-2267 include unauthorized information access and potential execution of malicious code.

Can CVE-2005-2267 be exploited without user interaction?

Exploitation of CVE-2005-2267 may require user interaction, such as visiting a malicious site or opening a crafted document.