Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
CVSS Details
- CVSS 3.1 Base Score: 9.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-gtkUpgrade mozilla-thunderbirdUpgrade mozilla-gtk1Upgrade ja-linux-mozillafirebird-gtk1Upgrade de-netscape7Upgrade linux-firefoxUpgrade fr-netscape7Upgrade mozilla-firebirdUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla+ipv6Upgrade mozilla-gtk2Upgrade linux-phoenixUpgrade de-linux-netscapeUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-embeddedUpgrade netscape7Upgrade pt_BR-netscape7Upgrade phoenixUpgrade fr-linux-netscapeUpgrade linux-netscapeUpgrade linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade de-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade ja-netscape7Upgrade linux-mozilla-develUpgrade linux-mozillaUpgrade ru-linux-mozillafirebirdUpgrade firefoxUpgrade el-linux-mozillafirebirdUpgrade mozilla | Dec 10, 2025 | May 11, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-bin. | Oct 30, 2017 | May 9, 2005 |
| Mfsa2005 42 | — | Upgrade to Mozilla Firefox version 1.0.4Upgrade to the latest version of Mozilla Firefox | Jul 25, 2005 | May 9, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub