QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0905

Back to search

CVE-2004-0905

Published: Sep 24, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.

VendorProductVersions

n/a

n/a

affected
n/a

References

VU#651928
third-party-advisory
x_refsource_CERT-VN
SUSE-SA:2004:036
vendor-advisory
x_refsource_SUSE
FLSA:2089
vendor-advisory
x_refsource_FEDORA
oval:org.mitre.oval:def:10378
vdb-entry
signature
x_refsource_OVAL
11177
vdb-entry
x_refsource_BID
GLSA-200409-26
vendor-advisory
x_refsource_GENTOO
TA04-261A
third-party-advisory
x_refsource_CERT
SSRT4826
vendor-advisory
x_refsource_HP

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now