CVE-2005-1157

2005-05-0200:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.4%

JSON

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows
remote attackers to replace existing search plugins with malicious ones
using sidebar.addSearchEngine and the same filename as the target engine,
which may not be displayed in the GUI, which could then be used to execute
malicious script, aka “Firesearching 2.”