CVE-2005-0593
- State
- Published
- Severity
- Not scored
- Published
- Feb 28, 2005
- Updated
- Aug 7, 2024
- Reserved
- Feb 28, 2005
Description
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 12659vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=258048
- http://www.mozilla.org/security/announce/mfsa2005-14.html
- oval:org.mitre.oval:def:100044vdb-entrysignature
- https://bugzilla.mozilla.org/show_bug.cgi?id=268483
- https://bugzilla.mozilla.org/show_bug.cgi?id=277564
- RHSA-2005:176vendor-advisory
- oval:org.mitre.oval:def:9533vdb-entrysignature
- RHSA-2005:384vendor-advisory
- GLSA-200503-30vendor-advisory
- GLSA-200503-10vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=276720
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.