← Database

CVE-2005-2261

HIGH CVSS: 7.5 Published: 2005-07-13 Modified: 2026-06-16

Description

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.

Affected Platforms

Mozilla FirefoxMozilla MozillaMozilla Thunderbird

Weakness Type

NVD-CWE-Other

References