Published: 09/05/2005 Updated: 11/10/2017

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 515

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 1.0.3

Synopsis mozilla security update Type/Severity Security Advisory: Important Topic Updated mozilla packages that fix various security bugs are now availableThis update has been rated as having important security impact by the RedHat Security Response Team[Updated 24 May 2005]This erratum now includes updat ...

Synopsis firefox security update Type/Severity Security Advisory: Important Topic Updated firefox packages that fix various security bugs are now availableThis update has been rated as having important security impact by the RedHat Security Response Team Description Mozilla Firefox is an ...

<html><head><title>hide me bitch</title> <meta http-equiv="Expires" content="Tue, 16 Jan 1990 21:29:02 GMT"> <s ...

NVD-CWE-Other http://greyhatsecurity.org/firefox.htm http://greyhatsecurity.org/vulntests/ffrc.htm http://www.mozilla.org/security/announce/mfsa2005-42.html https://bugzilla.mozilla.org/show_bug.cgi?id=293302 https://bugzilla.mozilla.org/show_bug.cgi?id=292691 http://secunia.com/advisories/15292 http://www.kb.cert.org/vuls/id/648758 http://www.securityfocus.com/bid/13544 http://securitytracker.com/id?1013913 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt http://www.securityfocus.com/bid/15495 http://www.redhat.com/support/errata/RHSA-2005-434.html http://www.redhat.com/support/errata/RHSA-2005-435.html http://www.vupen.com/english/advisories/2005/0493 http://marc.info/?l=full-disclosure&m=111556301530553&w=2 http://marc.info/?l=full-disclosure&m=111553138007647&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/20443 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9231 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100001 https://access.redhat.com/errata/RHSA-2005:435 https://nvd.nist.gov https://www.exploit-db.com/exploits/986/https://www.kb.cert.org/vuls/id/648758

CVE-2005-1477

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect