20050313 Firefox 1.01 : spoofing status bar without using JavaScriptmailing list
http://marc.info/?l=full-disclosure&m=111073068631287&w=2 CVE-2005-4809
Mozilla Suite/Firefox/Thunderbird - Nested Anchor Tag Status Bar Spoofing
Record summary
CVE-2005-4809 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMozilla Suite/Firefox/Thunderbird - Nested Anchor Tag Status Bar SpoofingExploitDB exploitby bitlance winterNot analyzed1 file
References
814568Third-party advisory
http://secunia.com/advisories/14568 1013423vdb entry
http://securitytracker.com/id?1013423 14885vdb entry
http://www.osvdb.org/14885 12798vdb entry
http://www.securityfocus.com/bid/12798 ADV-2005-0260vdb entry
http://www.vupen.com/english/advisories/2005/0260 mozilla-save-link-as-dialog-spoofing(19540)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/19540 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-4809