QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-2266

Back to search

CVE-2005-2266

Published: Jul 13, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.

VendorProductVersions

n/a

n/a

affected
n/a

References

15549
third-party-advisory
x_refsource_SECUNIA
DSA-810
vendor-advisory
x_refsource_DEBIAN
SUSE-SR:2005:018
vendor-advisory
x_refsource_SUSE
15553
third-party-advisory
x_refsource_SECUNIA
FLSA:160202
vendor-advisory
x_refsource_FEDORA
19823
third-party-advisory
x_refsource_SECUNIA
RHSA-2005:587
vendor-advisory
x_refsource_REDHAT
ADV-2005-1075
vdb-entry
x_refsource_VUPEN
RHSA-2005:601
vendor-advisory
x_refsource_REDHAT
15551
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:100107
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:1415
vdb-entry
signature
x_refsource_OVAL
SUSE-SA:2005:045
vendor-advisory
x_refsource_SUSE
14242
vdb-entry
x_refsource_BID
RHSA-2005:586
vendor-advisory
x_refsource_REDHAT
oval:org.mitre.oval:def:10712
vdb-entry
signature
x_refsource_OVAL
SUSE-SA:2006:022
vendor-advisory
x_refsource_SUSE
oval:org.mitre.oval:def:773
vdb-entry
signature
x_refsource_OVAL
mozilla-frame-topfocus-xss(21332)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now