Description
Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | firefox | 1.0.1-1.4.3 | RHSA-2005:176 |
Advisories 1
- RHSA-2005:176 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 20050207 Fireflashing [Firefox 1.0] mailing-list
- RHSA-2005:323 vendor-advisory
- http://www.mozilla.org/security/announce/mfsa2005-27.html
- SUSE-SA:2005:016 vendor-advisory
- mozilla-firefox-aboutconfig-modify(19266) vdb-entry
- RHSA-2005:176 vendor-advisory
- RHSA-2005:384 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=280664
- oval:org.mitre.oval:def:10967 vdb-entry signature
- GLSA-200503-30 vendor-advisory
- GLSA-200503-10 vendor-advisory
- http://www.mikx.de/fireflashing/