CVE-2005-0401

FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows…

published March 24, 2005

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03307 · 88.4th percentile
Published
2005-03-24T05:00Z
EPSS history
Timeline
  • 24 MAR 05:00Z
    FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows…
    cvelistv5