AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2005-0401

MEDIUM · CVSS 5.1 EPSS 3.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-05-02 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.1. It affects Chrome, Firefox. It may be remotely exploitable.

CVE
CVE-2005-0401
Severity
MEDIUM
CVSS
5.1
EPSS
3.31%
Chrome Firefox

Original NVD Description

FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."