CVE-2005-0590

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger…

published February 28, 2005

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01671 · 76.6th percentile
Published
2005-02-28T05:00Z
EPSS history
Timeline
  • 28 FEB 05:00Z
    The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger…
    cvelistv5