CVE-2005-1155

Publication date 2 May 2005

Last updated 24 July 2024

Ubuntu priority

The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel=“icon”> tag with a javascript: URL in the href attribute, aka “Firelinking.”

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
mozilla	7.10 gutsy	Not in release
	7.04 feisty	Not in release
	6.10 edgy	Not affected
	6.06 LTS dapper	Not affected

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-124-1
Mozilla and Firefox vulnerabilities
11 May 2005

USN-149-3
Ubuntu 4.10 update for Firefox vulnerabilities
28 July 2005

Other references

https://www.cve.org/CVERecord?id=CVE-2005-1155