CVE-2005-2260
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
89.8%
The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user.
Affected configurations
References
bugzilla.mozilla.org/show_bug.cgi?id=289940
secunia.com/advisories/16043
secunia.com/advisories/16044
secunia.com/advisories/16059
www.ciac.org/ciac/bulletins/p-252.shtml
www.debian.org/security/2005/dsa-810
www.mozilla.org/security/announce/mfsa2005-45.html
www.networksecurity.fi/advisories/netscape-multiple-issues.html
www.novell.com/linux/security/advisories/2005_18_sr.html
www.novell.com/linux/security/advisories/2005_45_mozilla.html
www.redhat.com/support/errata/RHSA-2005-586.html
www.redhat.com/support/errata/RHSA-2005-587.html
www.securityfocus.com/bid/14242
www.vupen.com/english/advisories/2005/1075
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100013
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10132
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1226
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A742
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
89.8%