Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ja-linux-mozillafirebird-gtk1Upgrade mozilla+ipv6Upgrade linux-mozilla-develUpgrade de-netscape7Upgrade linux-phoenixUpgrade fr-netscape7Upgrade phoenixUpgrade el-linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade linux-mozillafirebirdUpgrade ja-netscape7Upgrade linux-netscapeUpgrade fr-linux-netscapeUpgrade mozillaUpgrade zhCN-linux-mozillafirebirdUpgrade mozilla-gtk1Upgrade ja-mozillafirebird-gtk2Upgrade mozilla-gtkUpgrade mozilla-gtk2Upgrade linux-mozillaUpgrade ru-linux-mozillafirebirdUpgrade zhTW-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade ja-linux-netscapeUpgrade mozilla-embeddedUpgrade mozilla-firebirdUpgrade firefoxUpgrade netscape7Upgrade mozilla-thunderbird | Dec 10, 2025 | Feb 26, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla.Upgrade www-client/mozilla-bin.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | May 2, 2005 |
| Mfsa2005 27 | — | Upgrade to Mozilla Firefox version 1.0.1Upgrade to the latest version of Mozilla Firefox | Jul 28, 2005 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub