Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code.

USN-149-1 fixed some vulnerabilities in the Ubuntu 5.04 (Hoary Hedgehog) version of Firefox. The version shipped with Ubuntu 4.10 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well. Please see

http://www.ubuntulinux.org/support/documentation/usn/usn-149-1

for the original advisory.

This update also fixes several older vulnerabilities; Some of them could be exploited to execute arbitrary code with full user privileges if the user visited a malicious website. (MFSA-2005-01 to MFSA-2005-44; please see the following website for details:
http://www.mozilla.org/projects/security/known-vulnerabilities.html)

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Versions of Mozilla Firefox prior to 1.7.5 are vulnerable to a heap overflow against its NNTP functionality. This may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it. 

The installed version of Firefox is earlier than 1.0.0.  Such versions have multiple vulnerabilities that could result in a denial of service, local file disclosure, or password disclosure.  These vulnerabilities are due to the fact that Firefox does handle the <IMG> tag correctly.

The remote host is using Firefox. The remote version of this software contains a security issue that may allow an attacker to determine existence of local files, cause a DoS and steal passwords (Windows only). The security vulnerability is due to the fact that Firefox does not handle correctly <IMG> tags. 

The remote host is using Mozilla.
The remote version of this software is vulnerable to a heap overflow against its NNTP functionality. This may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it.

ID	Name	Product	Family	Severity
20546	Ubuntu 4.10 : mozilla-firefox vulnerabilities (USN-149-3)	Nessus	Ubuntu Local Security Checks	high
2481	Mozilla Firefox < 1.7.5 NNTP Remote Heap Overflow	Nessus Network Monitor	Web Clients	medium
15712	Firefox < 1.0.0 Multiple Vulnerabilities	Nessus	Windows	medium
2402	Mozilla Firefox < 1.0.0 IMG Tag Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Web Clients	medium
801363	Mozilla < 1.7.5 Network News Transport Protocol Remote Heap Overflow	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2005-0150

critical

Tenable Plugins

high

medium

medium

medium

high