Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozillaUpgrade ru-linux-mozillafirebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade firefoxUpgrade netscape7Upgrade phoenixUpgrade ja-mozillafirebird-gtk2Upgrade linux-mozillafirebirdUpgrade mozilla-gtkUpgrade mozilla-firebirdUpgrade mozilla-embeddedUpgrade ja-linux-netscapeUpgrade linux-mozilla-develUpgrade de-linux-mozillafirebirdUpgrade mozilla-thunderbirdUpgrade el-linux-mozillafirebirdUpgrade ja-netscape7Upgrade linux-mozillaUpgrade mozilla+ipv6Upgrade fr-linux-netscapeUpgrade zhTW-linux-mozillafirebirdUpgrade de-netscape7Upgrade mozilla-gtk2Upgrade mozilla-gtk1Upgrade linux-netscapeUpgrade linux-firefoxUpgrade zhCN-linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade pt_BR-netscape7Upgrade linux-phoenixUpgrade fr-netscape7 | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox-locale-tr | Nov 8, 2024 | Jul 13, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub