CVE-2005-0146
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from...
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.
Exploit likelihood
What each source reports
NVD Score used
5.0
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.
- Record
CVE-2005-0146- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.
- Record
CVE-2005-0146- Updated
- 2026-11-02
EUVDEUVD-2005-0147 No score
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.
- Record
EUVD-2005-0147- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pfw3-m738-qjww No score
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from...
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.
- Record
GHSA-pfw3-m738-qjww- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdRed Hat:enterprise_linux:4::as |
before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbirdRed Hat:enterprise_linux:4::desktop |
before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbirdRed Hat:enterprise_linux:4::es |
before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbirdRed Hat:enterprise_linux:4::ws |
before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
devhelpRed Hat:enterprise_linux:4::as |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
devhelp-develRed Hat:enterprise_linux:4::as |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
evolutionRed Hat:enterprise_linux:4::as |
before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-develRed Hat:enterprise_linux:4::as |
before 0:2.0.2-14 | 0:2.0.2-14 |
devhelpRed Hat:enterprise_linux:4::desktop |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-develRed Hat:enterprise_linux:4::desktop |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
evolutionRed Hat:enterprise_linux:4::desktop |
before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-develRed Hat:enterprise_linux:4::desktop |
before 0:2.0.2-14 | 0:2.0.2-14 |
devhelpRed Hat:enterprise_linux:4::es |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-develRed Hat:enterprise_linux:4::es |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
evolutionRed Hat:enterprise_linux:4::es |
before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-develRed Hat:enterprise_linux:4::es |
before 0:2.0.2-14 | 0:2.0.2-14 |
devhelpRed Hat:enterprise_linux:4::ws |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-develRed Hat:enterprise_linux:4::ws |
before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
evolutionRed Hat:enterprise_linux:4::ws |
before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-develRed Hat:enterprise_linux:4::ws |
before 0:2.0.2-14 | 0:2.0.2-14 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0146 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published January 29, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.28%, the 70th percentile. Fixed in thunderbird 0:1.0-1.1.EL4.
References
securityfocus.com/bid/12407
mozilla.org/security/announce/mfsa2005-08.html
redhat.com/support/errata/RHSA-2005-335.html
exchange.xforce.ibmcloud.com/vulnerabilities/19171
redhat.com/support/errata/RHSA-2005-384.html
bugzilla.mozilla.org/show_bug.cgi?id=265728
Show 51 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10362
nvd.nist.gov/vuln/detail/CVE-2005-0146
github.com/advisories/GHSA-pfw3-m738-qjww
access.redhat.com/errata/RHSA-2005:094
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=146315
bugzilla.redhat.com/show_bug.cgi?id=156749
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_094.json
access.redhat.com/security/cve/CVE-2005-0146
bugzilla.redhat.com/show_bug.cgi?id=1617473
cve.org/CVERecord?id=CVE-2005-0146
access.redhat.com/security/cve/CVE-2005-0149
bugzilla.redhat.com/show_bug.cgi?id=1617475
cve.org/CVERecord?id=CVE-2005-0149
nvd.nist.gov/vuln/detail/CVE-2005-0149
access.redhat.com/errata/RHSA-2005:335
bugzilla.redhat.com/show_bug.cgi?id=142508
bugzilla.redhat.com/show_bug.cgi?id=144228
bugzilla.redhat.com/show_bug.cgi?id=146188
bugzilla.redhat.com/show_bug.cgi?id=147397
bugzilla.redhat.com/show_bug.cgi?id=150866
bugzilla.redhat.com/show_bug.cgi?id=151730
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_335.json
access.redhat.com/security/cve/CVE-2004-1380
bugzilla.redhat.com/show_bug.cgi?id=1617409
cve.org/CVERecord?id=CVE-2004-1380
nvd.nist.gov/vuln/detail/CVE-2004-1380
access.redhat.com/security/cve/CVE-2005-0141
bugzilla.redhat.com/show_bug.cgi?id=1617469
cve.org/CVERecord?id=CVE-2005-0141
nvd.nist.gov/vuln/detail/CVE-2005-0141
access.redhat.com/security/cve/CVE-2005-0142
bugzilla.redhat.com/show_bug.cgi?id=1617470
cve.org/CVERecord?id=CVE-2005-0142
nvd.nist.gov/vuln/detail/CVE-2005-0142
access.redhat.com/security/cve/CVE-2005-0143
bugzilla.redhat.com/show_bug.cgi?id=1617471
cve.org/CVERecord?id=CVE-2005-0143
nvd.nist.gov/vuln/detail/CVE-2005-0143
access.redhat.com/security/cve/CVE-2005-0144
bugzilla.redhat.com/show_bug.cgi?id=1617472
cve.org/CVERecord?id=CVE-2005-0144
nvd.nist.gov/vuln/detail/CVE-2005-0144
access.redhat.com/security/cve/CVE-2005-0399
bugzilla.redhat.com/show_bug.cgi?id=1617517
cve.org/CVERecord?id=CVE-2005-0399
nvd.nist.gov/vuln/detail/CVE-2005-0399
access.redhat.com/security/cve/CVE-2005-0401
bugzilla.redhat.com/show_bug.cgi?id=1617519
cve.org/CVERecord?id=CVE-2005-0401
nvd.nist.gov/vuln/detail/CVE-2005-0401