CVE-2005-1160

Published: May 2, 2005Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.

Affected (34)

Products: Mozilla: Firefox, Mozilla

2 products

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0
Mozilla Mozilla	Version 1.3
Mozilla Mozilla	Version 1.4.1
Mozilla Mozilla	Version 1.4
Mozilla Mozilla	Version 1.4 alpha
Mozilla Mozilla	Version 1.5.1
Mozilla Mozilla	Version 1.5
Mozilla Mozilla	Version 1.5 alpha
Mozilla Mozilla	Version 1.5 rc1
Mozilla Mozilla	Version 1.5 rc2
Mozilla Mozilla	Version 1.6
Mozilla Mozilla	Version 1.6 alpha
Mozilla Mozilla	Version 1.6 beta
Mozilla Mozilla	Version 1.7.1
Mozilla Mozilla	Version 1.7.2
Mozilla Mozilla	Version 1.7.3
Mozilla Mozilla	Version 1.7.5
Mozilla Mozilla	Version 1.7.6
Mozilla Mozilla	Version 1.7
Mozilla Mozilla	Version 1.7 alpha
Mozilla Mozilla	Version 1.7 beta
Mozilla Mozilla	Version 1.7 rc1
Mozilla Mozilla	Version 1.7 rc2
Mozilla Mozilla	Version 1.7 rc3

References (36)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt (unsafe URL)

Source: secalert@redhat.com

http://secunia.com/advisories/14938

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/14992

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/19823

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml

Source: secalert@redhat.com

PatchVendor Advisory

http://www.mozilla.org/security/announce/mfsa2005-41.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_04_25.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-383.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-384.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-386.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-601.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/13233

Source: secalert@redhat.com

http://www.securityfocus.com/bid/15495

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=289074

Source: secalert@redhat.com

Patch

https://bugzilla.mozilla.org/show_bug.cgi?id=289083

Source: secalert@redhat.com

Patch

https://bugzilla.mozilla.org/show_bug.cgi?id=289961

Source: secalert@redhat.com

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100017

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11291

Source: secalert@redhat.com

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/14938

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/14992

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19823

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mozilla.org/security/announce/mfsa2005-41.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_04_25.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-383.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-384.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-386.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-601.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/13233

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15495

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=289074

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.mozilla.org/show_bug.cgi?id=289083

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.mozilla.org/show_bug.cgi?id=289961

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100017

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11291

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.