CVE-2005-1532

HIGH

Description

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.

ID	Name	Product	Family	Severity
21952	CentOS 4 : thunderbird (CESA-2005:601)	Nessus	CentOS Local Security Checks	high
21939	CentOS 4 : firefox (CESA-2005:434)	Nessus	CentOS Local Security Checks	high
21827	CentOS 3 / 4 : mozilla (CESA-2005:435)	Nessus	CentOS Local Security Checks	high
20560	Ubuntu 4.10 / 5.04 : mozilla-thunderbird vulnerabilities (USN-157-1)	Nessus	Ubuntu Local Security Checks	high
20556	Ubuntu 4.10 / 5.04 : mozilla vulnerabilities (USN-155-1)	Nessus	Ubuntu Local Security Checks	high
20546	Ubuntu 4.10 : mozilla-firefox vulnerabilities (USN-149-3)	Nessus	Ubuntu Local Security Checks	high
20525	Ubuntu 5.04 : mozilla-firefox vulnerabilities (USN-134-1)	Nessus	Ubuntu Local Security Checks	high
3239	Mozilla Firefox < 1.0.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
3238	Mozilla Firefox < 1.7.12 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
19478	Debian DSA-781-1 : mozilla-thunderbird - several vulnerabilities	Nessus	Debian Local Security Checks	high
19277	RHEL 4 : thunderbird (RHSA-2005:601)	Nessus	Red Hat Local Security Checks	high
19269	Mozilla Thunderbird < 1.0.6 Multiple Vulnerabilities	Nessus	Windows	high
3099	Mozilla Firefox < 1.0.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
3067	Mozilla Firefox < 1.7.10 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
3066	Mozilla Firefox < 1.0.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
18388	RHEL 2.1 / 3 / 4 : mozilla (RHSA-2005:435)	Nessus	Red Hat Local Security Checks	high
18387	RHEL 4 : firefox (RHSA-2005:434)	Nessus	Red Hat Local Security Checks	high
18244	Mozilla Browser < 1.7.8 Multiple Vulnerabilities	Nessus	Windows	high
18243	Firefox < 1.0.4 Multiple Vulnerabilities	Nessus	Windows	high
2902	Mozilla Firefox < 1.7.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2887	Mozilla Firefox < 1.0.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2789	Mozilla Firefox < 1.7.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2788	Mozilla Firefox < 1.0.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2703	Mozilla Thunderbird < 1.0.2 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	SMTP Clients	medium
2671	Mozilla Firefox < 1.7.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2652	Mozilla Firefox < 1.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
2603	MSN Messenger < 6.2.0205 PNG File Remote Overflow (deprecated)	Nessus Network Monitor	Internet Messengers	medium
2602	Microsoft Media Player Version 9 PNG Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Generic	medium
1775	Mozilla Firefox XML User Interface Language Browser Interface Spoofing (deprecated)	Nessus Network Monitor	Web Clients	medium
1773	Mozilla Firefox < 1.7.1 / Thunderbird < 0.7.1 POP3 Remote Heap Overflow (deprecated)	Nessus Network Monitor	Web Clients	medium
1772	Mozilla Firefox < 1.7.1 Cross-Domain Frame Loading Vulnerability (deprecated)	Nessus Network Monitor	Web Clients	medium
1771	Mozilla Firefox < 1.7.2 Non-FQDN SSL Certificate Spoofing	Nessus Network Monitor	Web Clients	medium
1770	Mozilla Firefox < 1.7.1 SSL Redirect Spoofing	Nessus Network Monitor	Web Clients	medium
2116	Mozilla Firefox Input Type HTML Tag Unauthorized Access (deprecated)	Nessus Network Monitor	Web Clients	medium
801373	Mozilla XML User Interface Language Browser Interface Spoofing	Log Correlation Engine	Web Clients	medium
801318	Mozilla Browser < 1.7.8 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801295	Mozilla Firefox < 1.0.4 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801294	Mozilla Browser < 1.7.12 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801293	Mozilla < 1.7.7 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801292	Mozilla Browser < 1.7.2 Non-FQDN SSL Certificate Spoofing	Log Correlation Engine	Web Clients	medium
801263	Mozilla < 1.7.1 SSL Redirect Spoofing	Log Correlation Engine	Web Clients	medium
801257	Mozilla Browser < 1.7.10 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801229	Mozilla Browser Input Type HTML Tag Unauthorized Access	Log Correlation Engine	Web Clients	medium
801228	Mozilla < 1.7.1 Cross-Domain Frame Loading Vulnerability	Log Correlation Engine	Web Clients	medium
801221	Mozilla Thunderbird < 1.0.2 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	high
801217	Mozilla Firefox < 1.0.5 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801215	Mozilla < 1.7.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801211	Mozilla Browser <1.7.1 / Thunderbird < 0.7.1 SendUIDL POP3 Message Handling Remote Heap Overflow	Log Correlation Engine	Web Clients	medium
800781	Firefox < 1.0.7 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
800777	Firefox < 1.0.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
800757	Firefox < 1.0.1 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	medium
800745	Firefox < 1.0.3 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

CVE-2005-1532

Description

References

Details

Risk Information

CVSS v2.0