CVE-2005-1476

MEDIUM

Description

Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.

References

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt

http://greyhatsecurity.org/firefox.htm

http://greyhatsecurity.org/vulntests/ffrc.htm

http://marc.info/?l=full-disclosure&m=111553138007647&w=2

http://marc.info/?l=full-disclosure&m=111556301530553&w=2

http://secunia.com/advisories/15292

http://securitytracker.com/id?1013913

http://www.kb.cert.org/vuls/id/534710

http://www.mozilla.org/security/announce/mfsa2005-42.html

http://www.redhat.com/support/errata/RHSA-2005-434.html

http://www.redhat.com/support/errata/RHSA-2005-435.html

http://www.securityfocus.com/bid/13544

http://www.securityfocus.com/bid/15495

http://www.vupen.com/english/advisories/2005/0493

https://bugzilla.mozilla.org/show_bug.cgi?id=292691

https://bugzilla.mozilla.org/show_bug.cgi?id=293302

https://exchange.xforce.ibmcloud.com/vulnerabilities/20443

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100002

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045

Details

Source: MITRE

Published: 2005-05-09

Updated: 2017-10-11

Type: NVD-CWE-Other

Risk Information

CVSS v2.0

Base Score: 5.1

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 4.9

Severity: MEDIUM

Tenable Plugins

View all (46 total)

ID	Name	Product	Family	Severity
21939	CentOS 4 : firefox (CESA-2005:434)	Nessus	CentOS Local Security Checks	high
21827	CentOS 3 / 4 : mozilla (CESA-2005:435)	Nessus	CentOS Local Security Checks	high
3239	Mozilla Firefox < 1.0.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
3238	Mozilla Firefox < 1.7.12 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
3099	Mozilla Firefox < 1.0.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
19155	FreeBSD : mozilla -- code execution via javascript: IconURL vulnerability (eca6195a-c233-11d9-804c-02061b08fc24)	Nessus	FreeBSD Local Security Checks	medium
3067	Mozilla Firefox < 1.7.10 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
3066	Mozilla Firefox < 1.0.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
18388	RHEL 2.1 / 3 / 4 : mozilla (RHSA-2005:435)	Nessus	Red Hat Local Security Checks	high
18387	RHEL 4 : firefox (RHSA-2005:434)	Nessus	Red Hat Local Security Checks	high
18270	GLSA-200505-11 : Mozilla Suite, Mozilla Firefox: Remote compromise	Nessus	Gentoo Local Security Checks	medium
18244	Mozilla Browser < 1.7.8 Multiple Vulnerabilities	Nessus	Windows	high
18243	Firefox < 1.0.4 Multiple Vulnerabilities	Nessus	Windows	high
2902	Mozilla Firefox < 1.7.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2887	Mozilla Firefox < 1.0.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2789	Mozilla Firefox < 1.7.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2788	Mozilla Firefox < 1.0.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2703	Mozilla Thunderbird < 1.0.2 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	SMTP Clients	medium
2671	Mozilla Firefox < 1.7.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2652	Mozilla Firefox < 1.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2603	MSN Messenger < 6.2.0205 PNG File Remote Overflow (deprecated)	Nessus Network Monitor	Internet Messengers	medium
2602	Microsoft Media Player Version 9 PNG Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Generic	medium
1775	Mozilla Firefox XML User Interface Language Browser Interface Spoofing (deprecated)	Nessus Network Monitor	Web Clients	medium
1773	Mozilla Firefox < 1.7.1 / Thunderbird < 0.7.1 POP3 Remote Heap Overflow (deprecated)	Nessus Network Monitor	Web Clients	medium
1772	Mozilla Firefox < 1.7.1 Cross-Domain Frame Loading Vulnerability (deprecated)	Nessus Network Monitor	Web Clients	medium
1771	Mozilla Firefox < 1.7.2 Non-FQDN SSL Certificate Spoofing	Nessus Network Monitor	Web Clients	medium
1770	Mozilla Firefox < 1.7.1 SSL Redirect Spoofing	Nessus Network Monitor	Web Clients	medium
2116	Mozilla Firefox Input Type HTML Tag Unauthorized Access (deprecated)	Nessus Network Monitor	Web Clients	medium
801373	Mozilla XML User Interface Language Browser Interface Spoofing	Log Correlation Engine	Web Clients	medium
801318	Mozilla Browser < 1.7.8 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801295	Mozilla Firefox < 1.0.4 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801294	Mozilla Browser < 1.7.12 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801293	Mozilla < 1.7.7 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801292	Mozilla Browser < 1.7.2 Non-FQDN SSL Certificate Spoofing	Log Correlation Engine	Web Clients	medium
801263	Mozilla < 1.7.1 SSL Redirect Spoofing	Log Correlation Engine	Web Clients	medium
801257	Mozilla Browser < 1.7.10 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801229	Mozilla Browser Input Type HTML Tag Unauthorized Access	Log Correlation Engine	Web Clients	medium
801228	Mozilla < 1.7.1 Cross-Domain Frame Loading Vulnerability	Log Correlation Engine	Web Clients	medium
801221	Mozilla Thunderbird < 1.0.2 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	high
801217	Mozilla Firefox < 1.0.5 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801215	Mozilla < 1.7.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801211	Mozilla Browser <1.7.1 / Thunderbird < 0.7.1 SendUIDL POP3 Message Handling Remote Heap Overflow	Log Correlation Engine	Web Clients	medium
800781	Firefox < 1.0.7 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
800777	Firefox < 1.0.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
800757	Firefox < 1.0.1 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	medium
800745	Firefox < 1.0.3 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high