Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ru-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade el-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade mozillaUpgrade linux-mozilla-develUpgrade linux-mozillafirebirdUpgrade linux-mozillaUpgrade linux-netscapeUpgrade firefoxUpgrade ja-netscape7Upgrade fr-linux-netscapeUpgrade ja-linux-netscapeUpgrade de-linux-netscapeUpgrade fr-netscape7Upgrade mozilla-firebirdUpgrade linux-phoenixUpgrade mozilla-gtk2Upgrade ja-mozillafirebird-gtk2Upgrade mozilla-thunderbirdUpgrade mozilla-embeddedUpgrade mozilla+ipv6Upgrade mozilla-gtk1Upgrade linux-firefoxUpgrade ja-linux-mozillafirebird-gtk1Upgrade pt_BR-netscape7Upgrade phoenixUpgrade mozilla-gtkUpgrade netscape7Upgrade de-netscape7Upgrade zhTW-linux-mozillafirebird | Dec 10, 2025 | May 11, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla. | Oct 30, 2017 | May 9, 2005 |
| Mfsa2005 42 | — | Upgrade to Mozilla Firefox version 1.0.4Upgrade to the latest version of Mozilla Firefox | Jul 25, 2005 | May 9, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub