medium5.0Public exploit code
CVE-2005-4809
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mozilla Suite/Firefox/Thunderbird - Nested Anchor Tag Status Bar Spoofing2005-03-14 · remote · linux · Verified
Impact
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3, 0.10 |
| Mozilla | Mozilla | Versions 1.7.3, 1.7.4, 1.7.5, 1.7.6 |
| Mozilla | Thunderbird | Versions 0.6, 0.7, 0.7.1, 0.7.2, 0.7.3, 0.8 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=111073068631287&w=2
- http://secunia.com/advisories/14568
- http://securitytracker.com/id?1013423
- http://www.osvdb.org/14885
- http://www.securityfocus.com/bid/12798
- http://www.vupen.com/english/advisories/2005/0260
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19540
- http://marc.info/?l=full-disclosure&m=111073068631287&w=2
- http://secunia.com/advisories/14568
- http://securitytracker.com/id?1013423
- http://www.osvdb.org/14885
- http://www.securityfocus.com/bid/12798
- http://www.vupen.com/english/advisories/2005/0260
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19540