NetSight
IP …
medium4.6

CVE-2004-0905

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and poss…

Impact

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3
MozillaMozilla
Versions 1.0, 1.0.1, 1.0.2, 1.1, 1.2, 1.2.1
NetscapeNavigator
Versions 7.0, 7.0.2, 7.1, 7.2
ConectivaLinux
Versions 9.0, 10.0
RedhatEnterprise Linux
Versions 2.1, 3.0
RedhatEnterprise Linux Desktop
Version 3.0
RedhatFedora Core
Version core_1.0
RedhatLinux
Versions 7.3, 9.0
RedhatLinux Advanced Workstation
Version 2.1
SuseSuse Linux
Versions 1.0, 8, 8.1, 8.2, 9.0, 9.1

References