What’s Vulnerable › Vulnerabilities

CVE-2005-2269

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-07-13 · updated 2026-06-16

Description

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").

Affected products

• Mozilla Firefox: 0.8, 0.9, 0.9-rc, 0.9.1, 0.9.2, 0.9.3 (+7)
• Mozilla: 1.3, 1.4, 1.4-alpha, 1.4.1, 1.5, 1.5-alpha (+19)

References

• http://secunia.com/advisories/16043
• http://secunia.com/advisories/16044
• http://secunia.com/advisories/16059
• http://secunia.com/advisories/19823
• http://www.ciac.org/ciac/bulletins/p-252.shtml
• http://www.debian.org/security/2005/dsa-810
• http://www.mozilla.org/security/announce/mfsa2005-55.html
• http://www.networksecurity.fi/advisories/netscape-multiple-issues.html
• http://www.novell.com/linux/security/advisories/2005_18_sr.html
• http://www.novell.com/linux/security/advisories/2005_45_mozilla.html
• http://www.novell.com/linux/security/advisories/2006_04_25.html
• http://www.redhat.com/support/errata/RHSA-2005-586.html

Get alerted when CVE-2005-2269 or the next vulnerability affects your stack