CVE-2005-2262

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 6.5%

from disclosure to weapon0 days

Published on NVDJul 13

1st PoCJul 13

exploitation probability

6.5%top 7% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1102

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/16043 http://secunia.com/advisories/16044 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11097 http://www.ciac.org/ciac/bulletins/p-252.shtml http://www.mikx.de/firewalling/http://www.mozilla.org/security/announce/mfsa2005-47.html http://www.networksecurity.fi/advisories/netscape-multiple-issues.html http://www.novell.com/linux/security/advisories/2005_18_sr.html http://www.novell.com/linux/security/advisories/2005_45_mozilla.html http://www.redhat.com/support/errata/RHSA-2005-586.html http://www.securiteam.com/securitynews/5ZP0E0UGAK.html