CVE-2005-2968
NoneCVSS
—
EPSS
10.7%
Published
Sep 20, 2005
CISA due date
—
The record
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.1 | mozilla-thunderbird | 0 | 1.0.2-2.sarge1.0.7 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.0.7-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.0.7-1.4.1 |
Related vulnerabilities
- CVE-2006-1730 Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before… Also affects mozilla-thunderbird
- CVE-2006-0749 nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before… Also affects mozilla-thunderbird
- CVE-2005-4134 Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote… Also affects mozilla-thunderbird
- CVE-2005-2871 Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6… Also affects mozilla-thunderbird
- CVE-2005-2265 Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote… Also affects mozilla-thunderbird
- CVE-2005-0989 The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6… Also affects mozilla-thunderbird
- CVE-2011-3026 Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote… Also affects firefox
- CVE-2011-3659 Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0… Also affects firefox