Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - | |
| References | () http://secunia.com/advisories/19823 - | |
| References | () http://securitytracker.com/id?1013964 - | |
| References | () http://securitytracker.com/id?1013965 - | |
| References | () http://www.mozilla.org/security/announce/mfsa2005-44.html - | |
| References | () http://www.novell.com/linux/security/advisories/2006_04_25.html - | |
| References | () http://www.redhat.com/support/errata/RHSA-2005-434.html - | |
| References | () http://www.redhat.com/support/errata/RHSA-2005-435.html - | |
| References | () http://www.redhat.com/support/errata/RHSA-2005-601.html - | |
| References | () http://www.securityfocus.com/bid/13645 - | |
| References | () http://www.securityfocus.com/bid/15495 - | |
| References | () http://www.vupen.com/english/advisories/2005/0530 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100014 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10791 - |
Information
Published : 2005-05-12 04:00
Updated : 2024-11-20 23:57
NVD link : CVE-2005-1532
Mitre link : CVE-2005-1532
CVE.ORG link : CVE-2005-1532
JSON object : View
Products Affected
mozilla
- mozilla
- firefox
CWE
CWE-264
Permissions, Privileges, and Access Controls