CVE-2005-1476
NoneCVSS
—
EPSS
16.7%
Published
May 9, 2005
CISA due date
—
The record
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.0.4-1.4.1 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.0.4-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.0.4-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.0.4-1.4.1 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.0.4-1.4.1 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.0.4-1.4.1 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.9.2-2.4.5 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.0.4-1.4.1 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.0.4-1.4.1 |
Related vulnerabilities
- CVE-2008-0016 Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before… Also affects devhelp
- CVE-2007-1562 The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3… Also affects devhelp
- CVE-2007-0009 Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services… Also affects devhelp
- CVE-2007-0981 Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and… Also affects devhelp
- CVE-2006-4253 Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers… Also affects devhelp
- CVE-2006-3677 Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to… Also affects devhelp
- CVE-2006-1730 Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before… Also affects devhelp
- CVE-2006-0749 nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before… Also affects devhelp