CVE-2005-4809: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days.

Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status Bar via an A HREF tag that contains a TABLE tag that contains another A tag.

Affected products

• Mozilla Firefox: version 0.8 only; version 0.9 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.10 only; …
• Mozilla Mozilla: version 1.7.3 only; version 1.7.4 only; version 1.7.5 only; version 1.7.6 only
• Mozilla Thunderbird: version 0.6 only; version 0.7 only; version 0.7.1 only; version 0.7.2 only; version 0.7.3 only; version 0.8 only; …

Published 2005-12-31. Last modified 2026-06-16.