CVE-2005-0146

Firefox and Mozilla - Unauthenticated Clipboard Data Exposure via Middle-Click Event

Title source: llm

Description

Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/12407

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/mfsa2005-08.html

Patch, Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-335.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/19171

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-384.html

Vendor Advisory x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=265728

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10362

Scores

EPSS 0.0128

EPSS Percentile 66.9%

Details

Status published

Products (9)

mozilla/firefox 0.8

mozilla/firefox 0.9

mozilla/firefox 0.9.1

mozilla/firefox 0.9.2

mozilla/firefox 0.9.3

mozilla/mozilla 1.7 (2 CPE variants)

mozilla/mozilla 1.7.1

mozilla/mozilla 1.7.2

mozilla/mozilla 1.7.3

Published May 02, 2005

Tracked Since Feb 18, 2026