security flaw

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1."...

security flaw

The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers ...

GLSA-200504-18 : Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-18 Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities The following vulnerabilities were found and fixed in the Mozilla Suite and Mozilla Firefox: Vladimir V. Perepelitsa reported a memory disclosure bug in JavaScript...

CVE-2005-1160

The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object...

CVE-2005-1159

The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers ...

CVE-2005-1155

The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a tag with a javascript: URL in the href attribute, aka "Firelinking."...

CVE-2005-1153

Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option...

CVE-2005-1160

CVE-2005-1160 affects Firefox before 1.0.3 and Mozilla Suite before 1.7.7. The vulnerability arises in the privileged chrome UI where an attacker could override certain properties or methods of DOM nodes, enabling privilege escalation. Attacks demonstrated via the eval function or the Script obje...

CVE-2005-1156

CVE-2005-1156 affects Firefox <= 1.0.2 before 1.0.3, Mozilla Suite

CVE-2005-1155

CVE-2005-1155 affects Mozilla Firefox prior to 1.0.3 and Mozilla Suite prior to 1.7.7. The issue arises from favicon handling: a malicious page can supply a favicon LINK tag with a javascript: URL in the href, allowing remote code execution. Publicly documented in Red Hat/CentOS advisories RHSA-2...

CVE-2005-1157

CVE-2005-1157 affects Firefox < 1.0.3, Mozilla Suite

CVE-2005-1157

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute...

CVE-2005-1159

CVE-2005-1159 affects Mozilla/Firefox: the native implementations of InstallTrigger and related JS access paths do not properly verify object types, allowing the JavaScript interpreter to run at an incorrect memory address. This can cause an application crash (DoS) and, in the worst case, may ena...

CVE-2005-1156

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1."...

CVE-2005-1154

Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."...

CVE-2005-1154: Undefined Security Weakness

Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."...

CVE-2005-1157: Undefined Security Weakness

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute...

CVE-2005-1156: Undefined Security Weakness

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1."...

CVE-2005-1155: Improper Control of Generation of Code

The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a tag with a javascript: URL in the href attribute, aka "Firelinking."...

CVE-2005-1159: Undefined Security Weakness

The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers ...