17964 : Multiple Browser Content-generated Event Multiple Issues
Printer | http://osvdb.org/17964 | Email This | Edit Vulnerability

Views This Week

2

Views All Time

52

Info

Last Modified

about 1 year ago

Percent Complete

20%

Disclosure

Apr 11, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

This Entry needs help! It is only 20% Complete. Click the edit link above to add more information.

Contributing is fast and easy, and benefits the entire security community.

Description

(Description Provided by CVE) : The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user.

Classification

Unknown or Incomplete

Products

Hewlett-Packard Development Company, L.P.

OpenVMS Secure Web Browser

1.7.8

References

Bugtraq ID: 14242
Secunia Advisory ID: 16043 16044 16095 16141 16151 16157 16164 16168 16197 16230 16233 16257 16326 16418 16437 16507 16797 16894 17057
CVE ID: 2005-2260 (see also: NVD)
Keyword: 2005-45 HPSBOV01229 MFSA Mozilla Foundation Security Advisory SSRT5999
Other Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20050802-01-U.asc http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:128
http://lists.suse.com/archive/suse-security-announce/2005-Jul/0006.html
http://security.gentoo.org/glsa/glsa-200507-14.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware- ......
http://www.debian.org/security/2005/dsa-779
http://www.debian.org/security/2005/dsa-810
http://www.gentoo.org/security/en/glsa/glsa-200507-24.xml
http://www.networksecurity.fi/advisories/netscape-multiple-issues.html
http://www.novell.com/linux/security/advisories/2005_45_mozilla.html
http://www.ubuntulinux.org/support/documentation/usn/usn-149-1
http://www.ubuntulinux.org/support/documentation/usn/usn-155-1
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-09/0236.html
Vendor Specific Advisory URL: http://www.mozilla.org/security/announce/mfsa2005-45.html
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01231
http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBOV01229
Vendor Specific Solution URL: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01230
Vendor Specific News/Changelog Entry: https://bugzilla.mozilla.org/show_bug.cgi?id=289940
CIAC Advisory: p-252
RedHat RHSA: RHSA-2005:586 RHSA-2005:587

Tools & Filters

Nessus	18689 18813 19260 19262 19268 19269 19273 19276 19285 19431 19433 19476 19478 19685 19888 20420 20421 20544 20556

Credit

Unknown or Incomplete

Blogs

Provided by Technorati

None found at this time

Comments

Add Comment Hide Add Comment

No Comments.

User Status

Account
- Login
- Sign-Up

Quick Searches

Advertisements

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

© Copyright 2008 Open Source Vulnerability Database (OSVDB), All Rights Reserved.
Privacy Statement - Terms of Use