FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-2262

This CVE name corresponds to:

Entered	Topic
2005-07-16	firefox & mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-2262 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-2262
Phase	Assigned(20050713)

Description

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."

References

Source	Reference
MISC	http://www.mikx.de/firewalling/
MISC	http://www.networksecurity.fi/advisories/netscape-multiple-issues.html
CONFIRM	http://www.mozilla.org/security/announce/mfsa2005-47.html
REDHAT	RHSA-2005:586
SUSE	SUSE-SA:2005:045
SUSE	SUSE-SR:2005:018
CIAC	P-252
MISC	http://www.securiteam.com/securitynews/5ZP0E0UGAK.html
BID	14242
OVAL	oval:org.mitre.oval:def:11097
VUPEN	ADV-2005-1075
OVAL	oval:org.mitre.oval:def:100011
SECUNIA	16043
SECUNIA	16044