CVE-2005-2264

CVE-2005-2264 describes a vulnerability in Firefox versions prior to 1.0.5, allowing remote attackers to steal sensitive information. This is achieved by tricking a user into opening a malicious link in the Firefox sidebar using the "_search" target, subsequently injecting script into other pages via a data: URL. With a CVSS score of 7.5 (High), the vulnerability has a low attack complexity and requires no authentication, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.