| Max CVSS | 5.1 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-0587 | 2.6 |
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.
|
02-02-2024 - 02:03 | 25-03-2005 - 05:00 | |
| CVE-2005-1275 | 5.0 |
Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.
|
11-10-2017 - 01:30 | 25-04-2005 - 04:00 | |
| CVE-2005-0585 | 2.6 |
Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks.
|
11-10-2017 - 01:29 | 25-03-2005 - 05:00 | |
| CVE-2005-0231 | 2.6 |
Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."
|
11-10-2017 - 01:29 | 07-02-2005 - 05:00 | |
| CVE-2005-0584 | 2.6 |
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
|
11-10-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2005-0527 | 5.1 |
Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."
|
11-10-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2005-0588 | 5.0 |
Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.
|
11-10-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2005-0589 | 5.0 |
The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.
|
11-10-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2005-0230 | 5.1 |
Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execu
|
11-10-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2005-0586 | 2.6 |
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.
|
11-10-2017 - 01:29 | 02-05-2005 - 04:00 |