CVE-2005-2704

Description (CNA)

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.mandriva.com/security/advisories?name=MDKSA-2005:169
• http://www.debian.org/security/2005/dsa-868
• http://www.vupen.com/english/advisories/2005/1824
• http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html
• http://www.securityfocus.com/bid/15495
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9784
• http://securitytracker.com/id?1014954
• http://www.redhat.com/support/errata/RHSA-2005-789.html
• http://secunia.com/advisories/17026
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22824
• http://www.redhat.com/support/errata/RHSA-2005-791.html
• http://www.ubuntu.com/usn/usn-200-1
• http://secunia.com/advisories/17042
• http://www.debian.org/security/2005/dsa-866
• http://www.mozilla.org/security/announce/mfsa2005-58.html
• http://secunia.com/advisories/17284
• http://secunia.com/advisories/17149
• http://secunia.com/advisories/17263
• http://secunia.com/advisories/16917
• http://www.securityfocus.com/bid/14921
• http://www.debian.org/security/2005/dsa-838
• http://secunia.com/advisories/17014
• http://www.redhat.com/support/errata/RHSA-2005-785.html
• http://www.novell.com/linux/security/advisories/2005_58_mozilla.html
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:174
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1272
• http://secunia.com/advisories/17090
• http://secunia.com/advisories/16911
• http://secunia.com/advisories/16977
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:170

ADP enrichment