Skip to content

CVE-2003-0791 The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which...

CriticalCVSS 9.8 EPSS 2.1%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.

Affected products

ProductAffected versionsFixed in
mozilla <= 1.4 No fix listed
sco openserver = 5.0.7 No fix listed

References

  • 11103 third-party-advisory url-repurposed
  • MDKSA-2004:021 broken-link vendor-advisory
  • 8390 broken-link patch vdb-entry vendor-advisory
  • SCOSA-2004.8 broken-link patch third-party-advisory vdb-entry vendor-advisory
  • 9322 broken-link patch third-party-advisory vdb-entry vendor-advisory
  • bugzilla.mozilla.org issue-tracking patch vendor-advisory