CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-1155

The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.297

EPSS Ranking 96.4%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2005-1155

Mozilla » Firefox » Version: 0.10

cpe:2.3:a:mozilla:firefox:0.10
Mozilla » Firefox » Version: 0.10.1

cpe:2.3:a:mozilla:firefox:0.10.1
Mozilla » Firefox » Version: 0.8

cpe:2.3:a:mozilla:firefox:0.8
Mozilla » Firefox » Version: 0.9

cpe:2.3:a:mozilla:firefox:0.9
Mozilla » Firefox » Version: 0.9.1

cpe:2.3:a:mozilla:firefox:0.9.1
Mozilla » Firefox » Version: 0.9.2

cpe:2.3:a:mozilla:firefox:0.9.2
Mozilla » Firefox » Version: 0.9.3

cpe:2.3:a:mozilla:firefox:0.9.3
Mozilla » Firefox » Version: 1.0

cpe:2.3:a:mozilla:firefox:1.0
Mozilla » Firefox » Version: 1.0.1

cpe:2.3:a:mozilla:firefox:1.0.1
Mozilla » Firefox » Version: 1.0.2

cpe:2.3:a:mozilla:firefox:1.0.2
Mozilla » Mozilla » Version: 1.3

cpe:2.3:a:mozilla:mozilla:1.3
Mozilla » Mozilla » Version: 1.4

cpe:2.3:a:mozilla:mozilla:1.4
Mozilla » Mozilla » Version: 1.4.1

cpe:2.3:a:mozilla:mozilla:1.4.1
Mozilla » Mozilla » Version: 1.5

cpe:2.3:a:mozilla:mozilla:1.5
Mozilla » Mozilla » Version: 1.5.1

cpe:2.3:a:mozilla:mozilla:1.5.1
Mozilla » Mozilla » Version: 1.6

cpe:2.3:a:mozilla:mozilla:1.6
Mozilla » Mozilla » Version: 1.7

cpe:2.3:a:mozilla:mozilla:1.7
Mozilla » Mozilla » Version: 1.7.1

cpe:2.3:a:mozilla:mozilla:1.7.1
Mozilla » Mozilla » Version: 1.7.2

cpe:2.3:a:mozilla:mozilla:1.7.2
Mozilla » Mozilla » Version: 1.7.3

cpe:2.3:a:mozilla:mozilla:1.7.3
Mozilla » Mozilla » Version: 1.7.5

cpe:2.3:a:mozilla:mozilla:1.7.5
Mozilla » Mozilla » Version: 1.7.6

cpe:2.3:a:mozilla:mozilla:1.7.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-1155

Products

Pricing

Contact Us