CVE-2005-3089
Firefox 1.0.6 - Denial of Service via Proxy Auto-Config Eval Statement
Title source: llmDescription
Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability.
References (9)
Core 9
Core References
Patch vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1014949
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14924
Vendor Advisory vendor-advisory
x_refsource_fedora
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html
Patch x_refsource_misc
http://www.mozilla.org/products/firefox/releases/1.0.7.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9280
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/19615
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/22371
Issue Tracking x_refsource_misc
https://bugzilla.mozilla.org/show_bug.cgi?id=302100
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/16977
Scores
EPSS
0.0168
EPSS Percentile
74.5%
Details
Status
published
Products (7)
mozilla/firefox
1.0
mozilla/firefox
1.0.1
mozilla/firefox
1.0.2
mozilla/firefox
1.0.3
mozilla/firefox
1.0.4
mozilla/firefox
1.0.5
mozilla/firefox
1.0.6
Published
Sep 28, 2005
Tracked Since
Feb 18, 2026