VULNERABILITY INTELLIGENCE
CVE-2005-0402
CVSS score2.6 LOW
EPSS probability2.52%
CISA KEVNot currently listed
Published2005-05-02
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, then using the sidebar panel to inject Javascript into a privileged page.
Primary references
- secalert@redhat.com — Patch, Vendor Advisory
- secalert@redhat.com — Vendor Advisory
- secalert@redhat.com — Patch, Vendor Advisory
- secalert@redhat.com
- secalert@redhat.com — Patch
- secalert@redhat.com
- secalert@redhat.com
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch