CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
76.1%
The privileged “chrome” UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.
Vendor | Product | Version | CPE |
---|---|---|---|
mozilla | firefox | 0.8 | cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:* |
mozilla | firefox | 0.9 | cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:* |
mozilla | firefox | 0.9 | cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:* |
mozilla | firefox | 0.9.1 | cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:* |
mozilla | firefox | 0.9.2 | cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:* |
mozilla | firefox | 0.9.3 | cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:* |
mozilla | firefox | 0.10 | cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:* |
mozilla | firefox | 0.10.1 | cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:* |
mozilla | firefox | 1.0 | cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:* |
mozilla | firefox | 1.0.1 | cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:* |
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
secunia.com/advisories/14938
secunia.com/advisories/14992
secunia.com/advisories/19823
www.gentoo.org/security/en/glsa/glsa-200504-18.xml
www.mozilla.org/security/announce/mfsa2005-41.html
www.novell.com/linux/security/advisories/2006_04_25.html
www.redhat.com/support/errata/RHSA-2005-383.html
www.redhat.com/support/errata/RHSA-2005-384.html
www.redhat.com/support/errata/RHSA-2005-386.html
www.redhat.com/support/errata/RHSA-2005-601.html
www.securityfocus.com/bid/13233
www.securityfocus.com/bid/15495
bugzilla.mozilla.org/show_bug.cgi?id=289074
bugzilla.mozilla.org/show_bug.cgi?id=289083
bugzilla.mozilla.org/show_bug.cgi?id=289961
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100017
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11291