CVE-2005-1532

2005-05-1200:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.621 Medium

EPSS

Percentile

97.8%

JSON

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit
privileges of Javascript eval and Script objects in the calling context,
which allows remote attackers to conduct unauthorized activities via
“non-DOM property overrides,” a variant of CVE-2005-1160.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchmozilla< 1.7.13-0.2ubuntu1UNKNOWN
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.06UNKNOWN
ubuntu6.10noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.7.04UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	mozilla	< 1.7.13-0.2ubuntu1	UNKNOWN
ubuntu	6.06	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.6.06	UNKNOWN
ubuntu	6.10	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.7.04	UNKNOWN