{"id":"CVE-2005-0589","aliases":["EUVD-2005-0590","GHSA-g4f8-m87g-59mw","RHSA-2005:176"],"status":"published","title":"The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially...","description":"The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0126,"percentile":0.6979,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-02-28T05:00:00Z","modified":"2026-06-26T10:02:35Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.4.3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.4.3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.4.3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-1.4.3"}]}],"bundled":16}],"products":[{"vendor":"mozilla","product":"firefox"}],"references":[{"url":"http://www.securityfocus.com/bid/12659","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10825","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100039","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-19.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-176.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=270697","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0589","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g4f8-m87g-59mw"},{"url":"https://access.redhat.com/errata/RHSA-2005:176","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=142506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=144216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=147402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=147727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=147735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149939","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_176.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1156","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617500","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0231","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617501","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0232","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617502","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0233","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0233","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617509","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0255","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617535","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0527","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0527","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0578","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0585","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0586","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0588","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0589","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0590","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0591","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0591","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617550","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0592","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0593","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-0589","description":"The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.","status":"published","published":"2005-02-28T05:00:00Z","modified":"2024-08-07T21:21:06.607Z","updated_at":"2026-11-02T14:33:40.909668Z"}],"euvd":[{"id":"EUVD-2005-0590","description":"The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.","status":"published","published":"2005-02-28T05:00:00Z","modified":"2024-08-07T21:21:06Z","updated_at":"2026-11-03T01:15:37.775776Z"}],"ghsa":[{"id":"GHSA-g4f8-m87g-59mw","title":"The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially...","description":"The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.","status":"published","published":"2022-05-01T01:50:34Z","modified":"2023-01-30T05:06:55Z","updated_at":"2026-11-02T14:47:35.414174Z"}],"nvd":[{"id":"CVE-2005-0589","description":"The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.","status":"published","published":"2005-05-02T04:00:00Z","modified":"2026-06-16T22:11:24.357Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:54.933728Z"}],"osv":[{"id":"RHSA-2005:176","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-15T15:15:06Z","modified":"2026-06-26T10:02:35Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}