CVE-2004-0905

Description

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.

Affected products

• conectiva / linux9.0 – 9.0
• conectiva / linux10.0 – 10.0
• Mozilla / Firefox0.9.2 – 0.9.2
• Mozilla / Firefox0.9.3 – 0.9.3
• Mozilla / Firefox0.9 – 0.9
• Mozilla / Firefox0.9.1 – 0.9.1
• Mozilla / Firefox0.8 – 0.8
• Mozilla / Firefox0.9 – 0.9
• Mozilla / mozilla1.0 – 1.0
• Mozilla / mozilla1.0.1 – 1.0.1
• Mozilla / mozilla1.0.2 – 1.0.2
• Mozilla / mozilla1.1 – 1.1
• Mozilla / mozilla1.1 – 1.1
• Mozilla / mozilla1.1 – 1.1
• Mozilla / mozilla1.2 – 1.2
• Mozilla / mozilla1.2 – 1.2
• Mozilla / mozilla1.2 – 1.2
• Mozilla / mozilla1.2.1 – 1.2.1
• Mozilla / mozilla1.3 – 1.3
• Mozilla / mozilla1.3.1 – 1.3.1
• Mozilla / mozilla1.4 – 1.4
• Mozilla / mozilla1.4 – 1.4
• Mozilla / mozilla1.4 – 1.4
• Mozilla / mozilla1.4.1 – 1.4.1
• Mozilla / mozilla1.4.2 – 1.4.2
• Mozilla / mozilla1.5 – 1.5
• Mozilla / mozilla1.6 – 1.6
• Mozilla / mozilla1.7 – 1.7
• Mozilla / mozilla1.7 – 1.7
• Mozilla / mozilla1.7.1 – 1.7.1
• Mozilla / mozilla1.7.2 – 1.7.2
• Mozilla / mozilla1.0 – 1.0
• Mozilla / mozilla1.0 – 1.0
• netscape / navigator7.0 – 7.0
• netscape / navigator7.0.2 – 7.0.2
• netscape / navigator7.1 – 7.1
• netscape / navigator7.2 – 7.2
• RedHat / enterprise_linux2.1 – 2.1
• RedHat / enterprise_linux2.1 – 2.1
• RedHat / enterprise_linux2.1 – 2.1
• RedHat / enterprise_linux2.1 – 2.1
• RedHat / enterprise_linux2.1 – 2.1
• RedHat / enterprise_linux2.1 – 2.1
• RedHat / enterprise_linux3.0 – 3.0
• RedHat / enterprise_linux3.0 – 3.0
• RedHat / enterprise_linux3.0 – 3.0
• RedHat / enterprise_linux_desktop3.0 – 3.0
• RedHat / fedora_corecore_1.0 – core_1.0
• RedHat / linux7.3 – 7.3
• RedHat / linux7.3 – 7.3
• RedHat / linux7.3 – 7.3
• RedHat / linux9.0 – 9.0
• RedHat / linux_advanced_workstation2.1 – 2.1
• RedHat / linux_advanced_workstation2.1 – 2.1
• SUSE / suse_linux1.0 – 1.0
• SUSE / suse_linux8 – 8
• SUSE / suse_linux8.1 – 8.1
• SUSE / suse_linux8.2 – 8.2
• SUSE / suse_linux9.0 – 9.0
• SUSE / suse_linux9.0 – 9.0
• SUSE / suse_linux9.0 – 9.0
• SUSE / suse_linux9.1 – 9.1

References

• MISChttp://www.kb.cert.org/vuls/id/651928
• VENDOR_ADVISORYhttp://www.novell.com/linux/security/advisories/2004_36_mozilla.html
• MISChttp://bugzilla.mozilla.org/show_bug.cgi?id=250862
• MAILING_LISThttp://marc.info/?l=bugtraq&m=109900315219363&w=2
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10378
• MISChttp://www.securityfocus.com/bid/11177
• MISChttp://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
• MISChttp://security.gentoo.org/glsa/glsa-200409-26.xml
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/17374
• MISChttp://www.us-cert.gov/cas/techalerts/TA04-261A.html
• MAILING_LISThttp://marc.info/?l=bugtraq&m=109698896104418&w=2