Published: 02/05/2005 Updated: 11/10/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Multiple "missing security checks" in Firefox prior to 1.0.3 allow remote malicious users to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.10.1
mozilla firefox 0.8
mozilla firefox 1.0.1
mozilla firefox 1.0.2
mozilla firefox 0.9.2
mozilla firefox 0.9.3
mozilla firefox 0.10
mozilla firefox 0.9
mozilla firefox 1.0
mozilla firefox 0.9.1

Synopsis firefox security update Type/Severity Security Advisory: Important Topic Updated firefox packages that fix various security bugs are now availableThis update has been rated as having Important security impact by the RedHat Security Response Team Description Mozilla Firefox is an ...

When a popup is blocked the user is given the ability to open that popup through the popup-blocking status bar icon and, in Firefox, through the information bar Doron Rosenberg noticed that popups which are permitted by the user were executed with elevated privileges, which could be abused to automatically install and execute arbitrary code with ...

USN-149-1 fixed some vulnerabilities in the Ubuntu 504 (Hoary Hedgehog) version of Firefox The version shipped with Ubuntu 410 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well Please see ...

NVD-CWE-Other http://www.mozilla.org/security/announce/mfsa2005-39.html https://bugzilla.mozilla.org/show_bug.cgi?id=290079 http://www.redhat.com/support/errata/RHSA-2005-383.html http://secunia.com/advisories/14938 http://www.securityfocus.com/bid/13231 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11734 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100019 https://access.redhat.com/errata/RHSA-2005:383 https://nvd.nist.gov https://usn.ubuntu.com/124-1/https://www.kb.cert.org/vuls/id/519317

CVE-2005-1158

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect