CVE-2005-2704: Medium severity Mozilla Firefox vulnerability
Published Sep 23, 2005
·Updated
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.
Affected Software
12 affected components
Mozilla Firefox<=1.0.6
Mozilla Firefox=1.0
Mozilla Firefox=1.0.1
Mozilla Firefox=1.0.2
Mozilla Firefox=1.0.3
Mozilla Firefox=1.0.4
Mozilla Firefox=1.0.5
Mozilla Mozilla Suite<=1.7.11
Mozilla Mozilla Suite=1.7.6
Mozilla Mozilla Suite=1.7.7
Mozilla Mozilla Suite=1.7.8
Mozilla Mozilla Suite=1.7.10
Remediation
Patch Available
Event History
Sep 23, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2704?
CVE-2005-2704 has a moderate severity rating, as it allows attackers to spoof DOM objects.
2
How do I fix CVE-2005-2704?
To fix CVE-2005-2704, update to Firefox version 1.0.7 or later and Mozilla Suite version 1.7.12 or later.
3
Which versions of Firefox are affected by CVE-2005-2704?
Firefox versions prior to 1.0.7, including 1.0.2, 1.0.6, and earlier versions are affected by CVE-2005-2704.
4
Which versions of Mozilla Suite are impacted by CVE-2005-2704?
Mozilla Suite versions before 1.7.12, including 1.7.10 and earlier, are impacted by CVE-2005-2704.
5
What type of vulnerability is CVE-2005-2704?
CVE-2005-2704 is a spoofing vulnerability that allows attackers to manipulate DOM objects.