CVE-2005-0232

Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."

• http://marc.info/?l=bugtraq&m=110781055630856&w=2
• http://www.gentoo.org/security/en/glsa/glsa-200503-10.xmlPatch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200503-30.xmlPatch, Vendor Advisory
• http://www.mikx.de/fireflashing/Exploit
• http://www.mozilla.org/security/announce/mfsa2005-27.htmlVendor Advisory
• http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-176.html
• http://www.redhat.com/support/errata/RHSA-2005-323.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-384.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=280664Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19266
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967
• http://marc.info/?l=bugtraq&m=110781055630856&w=2
• http://www.gentoo.org/security/en/glsa/glsa-200503-10.xmlPatch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200503-30.xmlPatch, Vendor Advisory
• http://www.mikx.de/fireflashing/Exploit
• http://www.mozilla.org/security/announce/mfsa2005-27.htmlVendor Advisory
• http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-176.html
• http://www.redhat.com/support/errata/RHSA-2005-323.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-384.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=280664Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19266
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10967

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0226Format string vulnerability in the Log_Resolver function in …
• CVE-2005-0227PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows l…
• CVE-2005-0228Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-0229CitrusDB 0.3.5 and earlier stores the newfile.txt temporary …
• CVE-2005-0230Firefox 1.0 does not prevent the user from dragging an execu…
• CVE-2005-0231Firefox 1.0 does not invoke the Javascript Security Manager …
• CVE-2005-0233The International Domain Name (IDN) support in Firefox 1.0, …
• CVE-2005-0234The International Domain Name (IDN) support in Safari 1.2.5 …
• CVE-2005-0235The International Domain Name (IDN) support in Opera 7.54 al…
• CVE-2005-0236The International Domain Name (IDN) support in Omniweb 5 all…
• CVE-2005-0237The International Domain Name (IDN) support in Konqueror 3.2…
• CVE-2005-0238The International Domain Name (IDN) support in Epiphany allo…