FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-2263

This CVE name corresponds to:

Entered	Topic
2005-07-16	firefox & mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-2263 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-2263
Phase	Assigned(20050713)

Description

The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.

References

Source	Reference
CONFIRM	http://www.mozilla.org/security/announce/mfsa2005-48.html
MISC	https://bugzilla.mozilla.org/show_bug.cgi?id=293331
DEBIAN	DSA-810
FEDORA	FLSA:160202
REDHAT	RHSA-2005:586
REDHAT	RHSA-2005:587
SUSE	SUSE-SA:2005:045
SUSE	SUSE-SR:2005:018
CIAC	P-252
BID	14242
OVAL	oval:org.mitre.oval:def:11629
VUPEN	ADV-2005-1075
OVAL	oval:org.mitre.oval:def:100010
OVAL	oval:org.mitre.oval:def:100016
OVAL	oval:org.mitre.oval:def:1281
OVAL	oval:org.mitre.oval:def:1311
SECUNIA	16043
SECUNIA	16059