Published: 02/05/2005 Updated: 11/10/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The native implementations of InstallTrigger and other functions in Firefox prior to 1.0.3 and Mozilla Suite prior to 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow malicious users to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.9.3
mozilla firefox 0.9
mozilla mozilla 1.4
mozilla mozilla 1.5
mozilla mozilla 1.6
mozilla mozilla 1.7
mozilla firefox 0.10.1
mozilla firefox 0.8
mozilla firefox 1.0.2
mozilla mozilla 1.3
mozilla mozilla 1.7.3
mozilla mozilla 1.7.5
mozilla firefox 0.9.1
mozilla firefox 0.9.2
mozilla mozilla 1.4.1
mozilla mozilla 1.7.6
mozilla firefox 0.10
mozilla firefox 1.0
mozilla firefox 1.0.1
mozilla mozilla 1.5.1
mozilla mozilla 1.7.1
mozilla mozilla 1.7.2

Synopsis firefox security update Type/Severity Security Advisory: Important Topic Updated firefox packages that fix various security bugs are now availableThis update has been rated as having Important security impact by the RedHat Security Response Team Description Mozilla Firefox is an ...

Synopsis Mozilla security update Type/Severity Security Advisory: Important Topic Updated Mozilla packages that fix various security bugs are now availableThis update has been rated as having Important security impact by the RedHat Security Response Team Description Mozilla is an open sou ...

Synopsis Mozilla security update Type/Severity Security Advisory: Important Topic Updated mozilla packages that fix various security bugs are now availableThis update has been rated as having Important security impact by the RedHat Security Response Team Description Mozilla is an open sou ...

Synopsis thunderbird security update Type/Severity Security Advisory: Important Topic Updated thunderbird package that fixes various bugs is now available forRed Hat Enterprise Linux 4This update has been rated as having important security impact by the RedHat Security Response Team Description ...

Several problems have been discovered in Mozilla Thunderbird, the standalone mail client of the Mozilla suite The Common Vulnerabilities and Exposures project identifies the following problems: CAN-2005-0989 Remote attackers could read portions of heap memory into a Javascript string via the lambda replace method CAN-2005-1159 The Ja ...

USN-149-1 fixed some vulnerabilities in the Ubuntu 504 (Hoary Hedgehog) version of Firefox The version shipped with Ubuntu 410 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well Please see ...

Vladimir V Perepelitsa discovered a bug in Thunderbird’s handling of anonymous functions during regular expression string replacement A malicious HTML email could exploit this to capture a random block of client memory (CAN-2005-0989) ...

NVD-CWE-Other http://www.mozilla.org/security/announce/mfsa2005-40.html https://bugzilla.mozilla.org/show_bug.cgi?id=290162 http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml http://www.redhat.com/support/errata/RHSA-2005-383.html http://www.redhat.com/support/errata/RHSA-2005-386.html http://www.securityfocus.com/bid/13232 http://securitytracker.com/id?1013742 http://securitytracker.com/id?1013743 http://secunia.com/advisories/14938 http://secunia.com/advisories/14992 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt http://www.securityfocus.com/bid/15495 http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.redhat.com/support/errata/RHSA-2005-601.html http://secunia.com/advisories/19823 http://www.novell.com/linux/security/advisories/2006_04_25.html https://exchange.xforce.ibmcloud.com/vulnerabilities/20123 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10629 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100018 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2005:383 https://usn.ubuntu.com/149-3/https://www.debian.org/security/./dsa-781

CVE-2005-1159

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect