CVE-2005-2267
Last modified
CVE-2005-2267 is a vulnerability of currently unknown severity. Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.. EPSS estimates a 4.49% chance of exploitation in the next 30 days.
Description
Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | 0.8 |
| Mozilla | Firefox | 0.9 |
| Mozilla | Firefox | 0.9.1 |
| Mozilla | Firefox | 0.9.2 |
| Mozilla | Firefox | 0.9.3 |
| Mozilla | Firefox | 0.10 |
| Mozilla | Firefox | 0.10.1 |
| Mozilla | Firefox | 1.0 |
| Mozilla | Firefox | 1.0.1 |
| Mozilla | Firefox | 1.0.2 |
| Mozilla | Firefox | 1.0.3 |
| Mozilla | Firefox | 1.0.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2267?
How severe is CVE-2005-2267?
How do I fix CVE-2005-2267?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2261Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla befo…
- CVE-2005-2262Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote a…
- CVE-2005-2263The InstallTrigger.install method in Firefox before 1.0.5 an…
- CVE-2005-2264Firefox before 1.0.5 allows remote attackers to steal sensit…
- CVE-2005-2265Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0…
- CVE-2005-2266Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child…
- CVE-2005-2268Firefox before 1.0.5 and Mozilla before 1.7.9 does not clear…
- CVE-2005-2269Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0…
- CVE-2005-2270Firefox before 1.0.5 and Mozilla before 1.7.9 does not prope…
- CVE-2005-2271iCab 2.9.8 does not clearly associate a Javascript dialog bo…
- CVE-2005-2272Safari version 2.0 (412) does not clearly associate a Javasc…
- CVE-2005-2273Opera 7.x and 8 before 8.01 does not clearly associate a Jav…
Are you affected by CVE-2005-2267?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST