NetSight
medium5.0Public exploit code

CVE-2005-4809

Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3, 0.10
MozillaMozilla
Versions 1.7.3, 1.7.4, 1.7.5, 1.7.6
MozillaThunderbird
Versions 0.6, 0.7, 0.7.1, 0.7.2, 0.7.3, 0.8

References