Mozilla / Firefox enablePrivilege Dialog Weakness (deprecated)

Low Nessus Network Monitor Plugin ID 2295


The remote host is vulnerable to a Script Injection attack.


The remote host appears to be running Mozilla or Firefox. It is reported that versions up to and including 0.9.3 of Firefox and up to and including 1.7.2 of Mozilla are prone to a security weakness in the enablePrivilege dialog that is displayed to authorize signed code execution. An attacker may display an arbitrary string in the security dialog to entice an user into executing a malicious script.


Upgrade or patch according to vendor recommendations.

Plugin Details

Severity: Low

ID: 2295

Family: Web Clients

Published: 2004/09/15

Modified: 2016/02/05

Dependencies: 1769

Risk Information

Risk Factor: Low


Base Score: 2.6

Temporal Score: 2.1

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:F/RL:OF/RC:C


Base Score: 3.6

Temporal Score: 3.3


Temporal Vector: CVSS3#E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:mozilla:firefox

Reference Information

BID: 11194