The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefoxUpgrade mozilla-firebirdUpgrade mozilla-thunderbirdUpgrade pt_BR-netscape7Upgrade linux-mozillaUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-gtk1Upgrade netscape7Upgrade linux-mozillafirebirdUpgrade ru-linux-mozillafirebirdUpgrade linux-phoenixUpgrade mozillaUpgrade mozilla-gtk2Upgrade el-linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade de-linux-mozillafirebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade zhTW-linux-mozillafirebirdUpgrade phoenixUpgrade de-linux-netscapeUpgrade mozilla-gtkUpgrade linux-netscapeUpgrade ja-netscape7Upgrade de-netscape7Upgrade zhCN-linux-mozillafirebirdUpgrade linux-mozilla-develUpgrade fr-netscape7Upgrade mozilla+ipv6Upgrade fr-linux-netscapeUpgrade linux-firefoxUpgrade ja-linux-netscape | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-trUpgrade mozilla-browser | Nov 8, 2024 | Jul 13, 2005 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub