VulnerabilityModified
CVE-2005-0584
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
LOW 2.6EPSS 1.02%
Does this matter?
Lower severity and a low EPSS score (1.02%). Track it; it rarely justifies an emergency change on its own.
Description
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
- CVSS 2.0
- 2.6 LOWAV:N/AC:H/Au:N/C:N/I:P/A:N
- EPSS
- 1.02% probability · 62th percentile
- CISA KEV
- Not listed
- Affected
- mozilla/firefox · mozilla/mozilla
- Source
- secalert@redhat.com
References
- http://www.gentoo.org/security/en/glsa/glsa-200503-10.xmlPatch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200503-30.xmlVendor Advisory
- http://www.mozilla.org/security/announce/mfsa2005-24.html
- http://www.redhat.com/support/errata/RHSA-2005-176.html
- http://www.redhat.com/support/errata/RHSA-2005-384.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=277574Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100034
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11191
- http://www.gentoo.org/security/en/glsa/glsa-200503-10.xmlPatch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200503-30.xmlVendor Advisory
- http://www.mozilla.org/security/announce/mfsa2005-24.html
- http://www.redhat.com/support/errata/RHSA-2005-176.html
- http://www.redhat.com/support/errata/RHSA-2005-384.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=277574Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100034
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11191
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.