deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-0034
Published: 2005-05-02
Description: An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/14008; http://securitytracker.com/id?1012995; http://www.isc.org/index.pl?/sw/bind/bind-security.php
CVE: CVE-2005-0035
Published: 2005-05-02
Description: The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/14813; http://www.adobe.com/support/techdocs/331465.html; http://www.hyperdose.com/advisories/H2005-06.txt
CVE: CVE-2005-0043
Published: 2005-05-02
Description: Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html; http://secunia.com/advisories/13804; http://securitytracker.com/id?1012839
CVE: CVE-2005-0044
Published: 2005-05-02
Description: The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://www.kb.cert.org/vuls/id/927889; http://www.us-cert.gov/cas/techalerts/TA05-039A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012
CVE: CVE-2005-0045
Published: 2005-05-02
Description: The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1852&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0205&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]1169&w=2
CVE: CVE-2005-0047
Published: 2005-05-02
Description: Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8817&w=2; http://www.argeniss.com/research/SSExploit.c; http://www.kb.cert.org/vuls/id/597889
CVE: CVE-2005-0048
Published: 2005-05-02
Description: Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://www.kb.cert.org/vuls/id/233754; http://www.us-cert.gov/cas/techalerts/TA05-102A.html; http://xforce.iss.net/xforce/alerts/id/192
CVE: CVE-2005-0049
Published: 2005-05-02
Description: Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.
CVSS Score: 4.3 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/340409; http://www.us-cert.gov/cas/techalerts/TA05-039A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006
CVE: CVE-2005-0050
Published: 2005-05-02
Description: The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/130433; http://www.us-cert.gov/cas/techalerts/TA05-039A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-010
CVE: CVE-2005-0051
Published: 2005-05-02
Description: The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14189; http://securitytracker.com/id?1013112; http://www.kb.cert.org/vuls/id/939074
CVE: CVE-2005-0053
Published: 2005-05-02
Description: Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://www.kb.cert.org/vuls/id/698835; http://www.securityfocus.com/bid/11466; http://www.us-cert.gov/cas/techalerts/TA05-039A.html
CVE: CVE-2005-0054
Published: 2005-05-02
Description: Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2781&w=2; http://www.kb.cert.org/vuls/id/580299; http://www.us-cert.gov/cas/techalerts/TA05-039A.html
CVE: CVE-2005-0055
Published: 2005-05-02
Description: Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/11165/; http://secunia.com/secunia_research/2004-12/advisory/; http://securitytracker.com/id?1013125
CVE: CVE-2005-0056
Published: 2005-05-02
Description: Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."
CVSS Score: 5.1 (MEDIUM)
References: http://securitytracker.com/id?1013126; http://www.kb.cert.org/vuls/id/823971; http://www.securityfocus.com/bid/12427
CVE: CVE-2005-0057
Published: 2005-05-02
Description: The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/14195; http://securitytracker.com/id?1013119; http://www.kb.cert.org/vuls/id/820427
CVE: CVE-2005-0059
Published: 2005-05-02
Description: Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.
CVSS Score: 10.0 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-017; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4384; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4988
CVE: CVE-2005-0060
Published: 2005-05-02
Description: Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6926&w=2; http://www.ngssoftware.com/advisories/ms-01.txt; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018
CVE: CVE-2005-0061
Published: 2005-05-02
Description: The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.
CVSS Score: 7.2 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1656; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1761
CVE: CVE-2005-0063
Published: 2005-05-02
Description: The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6155&w=2; http://www.idefense.com/application/poi/display?id=231&type=vulnerabilities; http://www.securiteam.com/exploits/5YP0T0AFFW.html
CVE: CVE-2005-0064
Published: 2005-05-02
Description: Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch; ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921
CVE: CVE-2005-0065
Published: 2005-05-02
Description: The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka "TCP sequence number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS Score: 10.0 (HIGH)
References: http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html; http://www.securityfocus.com/bid/13124; http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
CVE: CVE-2005-0070
Published: 2005-05-02
Description: Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/14300; http://securitytracker.com/id?1013206; http://www.debian.org/security/2005/dsa-681
CVE: CVE-2005-0071
Published: 2005-05-02
Description: vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/13930; http://secunia.com/advisories/13995; http://secunia.com/advisories/14066
CVE: CVE-2005-0073
Published: 2005-05-02
Description: Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/14217; http://secunia.com/advisories/14224; http://securitytracker.com/id?1013163
CVE: CVE-2005-0076
Published: 2005-05-02
Description: Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2005/dsa-672; https://exchange.xforce.ibmcloud.com/vulnerabilities/19271; http://www.debian.org/security/2005/dsa-672
CVE: CVE-2005-0077
Published: 2005-05-02
Description: The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7597&w=2; http://secunia.com/advisories/14015; http://secunia.com/advisories/14050
CVE: CVE-2005-0078
Published: 2005-05-02
Description: The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2005/dsa-660; http://www.redhat.com/support/errata/RHSA-2005-009.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/19084
CVE: CVE-2005-0079
Published: 2005-05-02
Description: Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/13938; http://www.debian.org/security/2005/dsa-649; http://www.securityfocus.com/bid/12316
CVE: CVE-2005-0080
Published: 2005-05-02
Description: The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6351&w=2; http://qa.debian.org/bts-security.html
CVE: CVE-2005-0083
Published: 2005-05-02
Description: MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://www.idefense.com/application/poi/display?id=218&type=vulnerabilities; https://exchange.xforce.ibmcloud.com/vulnerabilities/19687; http://www.idefense.com/application/poi/display?id=218&type=vulnerabilities
CVE: CVE-2005-0084
Published: 2005-05-02
Description: Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/13946/; http://www.ciac.org/ciac/bulletins/p-106.shtml; http://www.debian.org/security/2005/dsa-653
CVE: CVE-2005-0086
Published: 2005-05-02
Description: Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.
CVSS Score: 7.5 (HIGH)
References: http://www.redhat.com/support/errata/RHSA-2005-068.html; https://bugzilla.fedora.us/show_bug.cgi?id=2404; https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=145527
CVE: CVE-2005-0088
Published: 2005-05-02
Description: The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8389&w=2; http://security.gentoo.org/glsa/glsa-200502-14.xml
CVE: CVE-2005-0089
Published: 2005-05-02
Description: The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8728&w=2; http://python.org/security/PSF-2005-001/patch-2.2.txt; http://secunia.com/advisories/14128
CVE: CVE-2005-0090
Published: 2005-05-02
Description: A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service (crash).
CVSS Score: 2.1 (LOW)
References: http://www.redhat.com/support/errata/RHSA-2005-092.html; http://www.securityfocus.com/bid/12599; https://exchange.xforce.ibmcloud.com/vulnerabilities/20618
CVE: CVE-2005-0091
Published: 2005-05-02
Description: Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls.
CVSS Score: 7.2 (HIGH)
References: http://www.redhat.com/support/errata/RHSA-2005-092.html; http://www.securityfocus.com/bid/12599; https://exchange.xforce.ibmcloud.com/vulnerabilities/20619
CVE: CVE-2005-0093
Published: 2005-05-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2005-0118
Published: 2005-05-02
Description: helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users.
CVSS Score: 2.1 (LOW)
References: http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html; http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html
CVE: CVE-2005-0119
Published: 2005-05-02
Description: helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.
CVSS Score: 2.1 (LOW)
References: http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html; http://www.vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html
CVE: CVE-2005-0120
Published: 2005-05-02
Description: helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.
CVSS Score: 2.1 (LOW)
References: http://people.freebsd.org/~niels/ports/korean/helvis/issues.txt; http://people.freebsd.org/~niels/ports/korean/helvis/issues.txt
CVE: CVE-2005-0121
Published: 2005-05-02
Description: Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argument or (2) a long username as recorded in the USER environment variable.
CVSS Score: 4.6 (MEDIUM)
References: http://www.vuxml.org/freebsd/949c470e-528f-11d9-ac20-00065be4b5b6.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/19039; https://exchange.xforce.ibmcloud.com/vulnerabilities/19040
CVE: CVE-2005-0125
Published: 2005-05-02
Description: The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via atrm, (2) execute arbitrary programs via the -f argument to batch, or (3) read arbitrary files via the -f argument to batch, which generates a job file that is readable by the local user.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7411&w=2; http://www.digitalmunition.com/DMA%5B2005-0127a%5D.txt
CVE: CVE-2005-0126
Published: 2005-05-02
Description: ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html; http://securitytracker.com/id?1013000; http://www.kb.cert.org/vuls/id/980078
CVE: CVE-2005-0127
Published: 2005-05-02
Description: Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html; http://secunia.com/advisories/14005; http://securitytracker.com/id?1013001
CVE: CVE-2005-0133
Published: 2005-05-02
Description: ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928; http://sourceforge.net/project/shownotes.php?release_id=300116; http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml
CVE: CVE-2005-0135
Published: 2005-05-02
Description: The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash).
CVSS Score: 2.1 (LOW)
References: http://linux.bkbits.net:8080/linux-2.6/cset%4041f2beablXVnAs_6fznhhITh1j5hZg; http://secunia.com/advisories/15019; http://secunia.com/advisories/20163
CVE: CVE-2005-0137
Published: 2005-05-02
Description: Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium syscall table entry."
CVSS Score: 2.1 (LOW)
References: http://www.redhat.com/support/errata/RHSA-2005-284.html; http://www.redhat.com/support/errata/RHSA-2005-293.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11039
CVE: CVE-2005-0140
Published: 2005-05-02
Description: Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/13984; http://www.idefense.com/application/poi/display?id=189&type=vulnerabilities; http://www.securityfocus.com/bid/12355
CVE: CVE-2005-0141
Published: 2005-05-02
Description: Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab.
CVSS Score: 2.6 (LOW)
References: http://www.mozilla.org/security/announce/mfsa2005-01.html; http://www.redhat.com/support/errata/RHSA-2005-323.html; http://www.redhat.com/support/errata/RHSA-2005-335.html
CVE: CVE-2005-0142
Published: 2005-05-02
Description: Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/19823; http://www.mozilla.org/security/announce/mfsa2005-02.html; http://www.novell.com/linux/security/advisories/2006_04_25.html
CVE: CVE-2005-0144
Published: 2005-05-02
Description: Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks.
CVSS Score: 2.6 (LOW)
References: http://www.mozilla.org/security/announce/mfsa2005-04.html; http://www.redhat.com/support/errata/RHSA-2005-323.html; http://www.redhat.com/support/errata/RHSA-2005-335.html