CVE 설명

The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.

CVE 정보

메트릭

메트릭	점수	심각도	CVSS 벡터	출처
V2	5		AV:N/AC:L/Au:N/C:N/I:P/A:N	nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

EPSS First.org

언급된 제품

구성 0

Mozilla>>Firefox >> Version 0.8

Mozilla>>Firefox >> Version 0.9

Mozilla>>Firefox >> Version 0.9.1

Mozilla>>Firefox >> Version 0.9.2

Mozilla>>Firefox >> Version 0.9.3

Mozilla>>Firefox >> Version 0.10

Mozilla>>Firefox >> Version 0.10.1

Mozilla>>Firefox >> Version 1.0

Mozilla>>Firefox >> Version 1.0.1

Mozilla>>Firefox >> Version 1.0.2

Mozilla>>Firefox >> Version 1.0.3

Mozilla>>Firefox >> Version 1.0.4

Mozilla>>Mozilla >> Version 1.3

Mozilla>>Mozilla >> Version 1.4

Mozilla>>Mozilla >> Version 1.4.1

Mozilla>>Mozilla >> Version 1.5

Mozilla>>Mozilla >> Version 1.5.1

Mozilla>>Mozilla >> Version 1.6

Mozilla>>Mozilla >> Version 1.7

Mozilla>>Mozilla >> Version 1.7.1

Mozilla>>Mozilla >> Version 1.7.2

Mozilla>>Mozilla >> Version 1.7.3

Mozilla>>Mozilla >> Version 1.7.5

Mozilla>>Mozilla >> Version 1.7.6

Mozilla>>Mozilla >> Version 1.7.7

Mozilla>>Mozilla >> Version 1.7.8

참고 자료

http://www.debian.org/security/2005/dsa-810
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.novell.com/linux/security/advisories/2005_18_sr.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.ciac.org/ciac/bulletins/p-252.shtml
Tags : third-party-advisory, government-resource, x_refsource_CIAC

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202
Tags : vendor-advisory, x_refsource_FEDORA

http://www.redhat.com/support/errata/RHSA-2005-587.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/16059
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2005/1075
Tags : vdb-entry, x_refsource_VUPEN

https://bugzilla.mozilla.org/show_bug.cgi?id=293331
Tags : x_refsource_MISC

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100010
Tags : vdb-entry, signature, x_refsource_OVAL

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100016
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.novell.com/linux/security/advisories/2005_45_mozilla.html
Tags : vendor-advisory, x_refsource_SUSE

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1311
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.securityfocus.com/bid/14242
Tags : vdb-entry, x_refsource_BID

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1281
Tags : vdb-entry, signature, x_refsource_OVAL

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11629
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.redhat.com/support/errata/RHSA-2005-586.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/16043
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mozilla.org/security/announce/mfsa2005-48.html
Tags : x_refsource_CONFIRM

날짜	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	3.78%	–	–
2022-02-20	–	–	3.78%	–	–
2022-04-03	–	–	3.78%	–	–
2022-07-17	–	–	3.78%	–	–
2023-02-05	–	–	4.36%	–	–
2023-02-19	–	–	3.78%	–	–
2023-03-12	–	–	–	1.78%	–
2023-09-03	–	–	–	1.78%	–
2023-11-05	–	–	–	2.46%	–
2024-02-11	–	–	–	2.46%	–
2024-06-02	–	–	–	2.46%	–
2024-12-22	–	–	–	2.23%	–
2025-01-19	–	–	–	0.82%	–
2025-01-19	–	–	–	0.82%	–
2025-03-18	–	–	–	–	4.51%
2025-05-01	–	–	–	–	4.51%
2025-05-04	–	–	–	–	4.51%
2025-05-09	–	–	–	–	4.51%
2025-11-18	–	–	–	–	4.51%
2025-11-21	–	–	–	–	4.51%

날짜	백분위수
2022-02-06	67%
2022-02-20	68%
2022-04-03	84%
2022-07-17	85%
2023-02-05	88%
2023-02-19	85%
2023-03-12	86%
2023-09-03	87%
2023-11-05	89%
2024-02-11	9%
2024-06-02	9%
2024-12-22	89%
2025-01-19	82%
2025-01-19	82%
2025-03-18	88%
2025-05-01	89%
2025-05-04	88%
2025-05-09	89%
2025-11-18	88%
2025-11-21	89%

CVE-2005-2263 : 상세 정보

CVE-2005-2263