Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-firebirdUpgrade mozilla-gtkUpgrade firefoxUpgrade linux-firefoxUpgrade phoenixUpgrade el-linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade de-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade ja-linux-netscapeUpgrade fr-netscape7Upgrade ja-linux-mozillafirebird-gtk1Upgrade mozilla-gtk1Upgrade mozilla-gtk2Upgrade mozilla-embeddedUpgrade zhTW-linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade linux-mozillafirebirdUpgrade mozilla-thunderbirdUpgrade zhCN-linux-mozillafirebirdUpgrade mozillaUpgrade netscape7Upgrade mozilla+ipv6Upgrade ru-linux-mozillafirebirdUpgrade linux-netscapeUpgrade linux-phoenixUpgrade de-linux-netscapeUpgrade ja-netscape7Upgrade de-netscape7Upgrade linux-mozillaUpgrade linux-mozilla-devel | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox | Nov 8, 2024 | Jul 13, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub