CVE Database · CVE-2005-1155
CVSS v3.1
N/A
EPSS
8.28%
Published
May 2, 2005
Modified
Apr 15, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking."
Weaknesses (CWE)
Affected Products (34)
References (20)
