CVE-2005-2269: High severity Mozilla Firefox vulnerability

Published Jul 13, 2005

Updated

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").

Affected Software

38 affected components

Mozilla Firefox=0.8

Mozilla Firefox=0.9

Mozilla Firefox=0.9-rc

Mozilla Firefox=0.9.1

Mozilla Firefox=0.9.2

Mozilla Firefox=0.9.3

Mozilla Firefox=0.10

Mozilla Firefox=0.10.1

Mozilla Firefox=1.0

Mozilla Firefox=1.0.1

Mozilla Firefox=1.0.2

Mozilla Firefox=1.0.3

Mozilla Firefox=1.0.4

Mozilla Mozilla=1.3

Mozilla Mozilla=1.4

Mozilla Mozilla=1.4-alpha

Mozilla Mozilla=1.4.1

Mozilla Mozilla=1.5

Mozilla Mozilla=1.5-alpha

Mozilla Mozilla=1.5-rc1

Mozilla Mozilla=1.5-rc2

Mozilla Mozilla=1.5.1

Mozilla Mozilla=1.6

Mozilla Mozilla=1.6-alpha

Mozilla Mozilla=1.6-beta

Mozilla Mozilla=1.7

Mozilla Mozilla=1.7-alpha

Mozilla Mozilla=1.7-beta

Mozilla Mozilla=1.7-rc1

Mozilla Mozilla=1.7-rc2

Mozilla Mozilla=1.7-rc3

Mozilla Mozilla=1.7.1

Mozilla Mozilla=1.7.2

Mozilla Mozilla=1.7.3

Mozilla Mozilla=1.7.5

Mozilla Mozilla=1.7.6

Mozilla Mozilla=1.7.7

Mozilla Mozilla=1.7.8

Remediation

Patch Available

http://www.mozilla.org/security/announce/mfsa2005-55.html

Event History

Jul 13, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2269?

CVE-2005-2269 has been rated as high severity due to the potential for remote code execution.

How do I fix CVE-2005-2269?

To fix CVE-2005-2269, upgrade your Firefox or Mozilla version to 1.0.5 or higher, or 1.7.9 or higher for Mozilla.

Which software is affected by CVE-2005-2269?

CVE-2005-2269 affects multiple versions of Firefox, Mozilla, and Netscape browsers before the specified patched versions.

Can CVE-2005-2269 be exploited remotely?

Yes, CVE-2005-2269 can be exploited remotely by attackers to execute arbitrary scripts or code.

What are the potential consequences of CVE-2005-2269?

Exploitation of CVE-2005-2269 can lead to unauthorized access, data exfiltration, or other malicious activities.