The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-gtk2Upgrade ja-mozillafirebird-gtk2Upgrade mozilla+ipv6Upgrade mozilla-gtkUpgrade mozilla-gtk1Upgrade ja-linux-netscapeUpgrade fr-linux-netscapeUpgrade linux-netscapeUpgrade fr-netscape7Upgrade zhTW-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade linux-firefoxUpgrade ja-netscape7Upgrade zhCN-linux-mozillafirebirdUpgrade phoenixUpgrade linux-mozillaUpgrade pt_BR-netscape7Upgrade de-netscape7Upgrade netscape7Upgrade linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade mozillaUpgrade ru-linux-mozillafirebirdUpgrade linux-mozilla-develUpgrade mozilla-thunderbirdUpgrade mozilla-firebirdUpgrade firefoxUpgrade ja-linux-mozillafirebird-gtk1Upgrade de-linux-netscapeUpgrade el-linux-mozillafirebirdUpgrade linux-phoenix | Dec 10, 2025 | May 11, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-bin. | Oct 30, 2017 | May 9, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub