Description
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | devhelp +1 | 0.9.2-2.4.3 | RHSA-2005:335 |
| RHEL 4 | evolution +1 | 2.0.2-14 | RHSA-2005:335 |
| RHEL 4 | firefox | 1.0.2-1.4.1 | RHSA-2005:336 |
Advisories 2
- RHSA-2005:336 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:335 Red Hat Security Advisory: mozilla security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2005:336 vendor-advisory
- ADV-2005-0296 vdb-entry
- http://mikx.de/firescrolling2/
- RHSA-2005:335 vendor-advisory
- oval:org.mitre.oval:def:9650 vdb-entry signature
- http://www.mozilla.org/security/announce/mfsa2005-32.html
- 12885 vdb-entry
- oval:org.mitre.oval:def:100026 vdb-entry signature
- RHSA-2005:384 vendor-advisory
- GLSA-200503-30 vendor-advisory
- 20050324 Firescrolling 2 [Firefox 1.0.1] mailing-list
- 14654 third-party-advisory