Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
CVSS Details
- CVSS 3.1 Base Score: 9.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-netscapeUpgrade linux-mozilla-develUpgrade linux-mozillafirebirdUpgrade firefoxUpgrade ja-netscape7Upgrade de-linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade el-linux-mozillafirebirdUpgrade ru-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade linux-mozillaUpgrade mozillaUpgrade de-linux-netscapeUpgrade phoenixUpgrade mozilla-thunderbirdUpgrade netscape7Upgrade pt_BR-netscape7Upgrade mozilla-gtkUpgrade ja-linux-mozillafirebird-gtk1Upgrade ja-mozillafirebird-gtk2Upgrade mozilla-embeddedUpgrade mozilla-gtk2Upgrade mozilla-firebirdUpgrade fr-netscape7Upgrade mozilla-gtk1Upgrade mozilla+ipv6Upgrade zhTW-linux-mozillafirebirdUpgrade linux-firefoxUpgrade linux-phoenixUpgrade de-netscape7 | Dec 10, 2025 | May 11, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla.Upgrade www-client/mozilla-bin. | Oct 30, 2017 | May 9, 2005 |
| Mfsa2005 42 | — | Upgrade to Mozilla Firefox version 1.0.4Upgrade to the latest version of Mozilla Firefox | Jul 25, 2005 | May 9, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub