CVE-2005-1476 Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary...
MediumCVSS 5.1
EPSS 16.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 1.0.3 | No fix listed |
References
- greyhatsecurity.org
- greyhatsecurity.org exploit
- 20050508 Firefox Remote Compromise Leaked mailing-list
- 20050508 Firefox Remote Compromise Technical Details mailing-list
- 15292 patch third-party-advisory vendor-advisory
- 1013913 vdb-entry
- VU#534710 third-party-advisory us-government-resource
- www.mozilla.org vendor-advisory
- RHSA-2005:434 vendor-advisory
- RHSA-2005:435 vendor-advisory
- 13544 vdb-entry
- 15495 vdb-entry
- ADV-2005-0493 vdb-entry
- bugzilla.mozilla.org
- bugzilla.mozilla.org
- mozilla-javascript-code-execution(20443) vdb-entry
- oval:org.mitre.oval:def:100002 signature vdb-entry
- oval:org.mitre.oval:def:10045 signature vdb-entry