CVE-2005-2264

Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-149-3
• Ubuntu 4.10 update for Firefox vulnerabilities
• 28 July 2005
• USN-149-1
• Firefox vulnerabilities
• 21 July 2005

Other references

• https://www.cve.org/CVERecord?id=CVE-2005-2264