« Volver al listado

CVE-2005-1937

Estado: ModificadaBaja (2.6)—

Un error de regresión en Firefox 1.0.3 y Mozilla 1.7.7 permite a atacantes remotos inyectar JavaScript arbitrario desde una página en el conjunto de marcos (frameset) de otro sitio, también conocido como vulnerabilidad de suplantación por inyección de marcos, una reintroducción de una vulnerabilidad que fue identificada y corregida originalmente con CVE-2004-0718.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Mozilla — FirefoxMozilla — Mozilla

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-1937",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "security@debian.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-06-14T04:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/15601",
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/",
      "source": "security@debian.org"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101952-1",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-777",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-810",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.mozilla.org/security/announce/mfsa2005-51.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2005-586.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2005-587.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/14242",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2005/1075",
      "source": "security@debian.org"
    },
    {
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=296850",
      "source": "security@debian.org"
    },
    {
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
      "source": "security@debian.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100007",
      "source": "security@debian.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10633",
      "source": "security@debian.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A637",
      "source": "security@debian.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A759",
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/15601",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101952-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-777",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-810",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mozilla.org/security/announce/mfsa2005-51.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2005_18_sr.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2005_45_mozilla.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2005-586.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2005-587.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/14242",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2005/1075",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=296850",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100007",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10633",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A637",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A759",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718."
    }
  ],
  "lastModified": "2026-06-16T22:13:56.973",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D48957B0-BD47-4186-ACD7-0B9E7DB39B38"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@debian.org"
}