Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade netscape7Upgrade linux-mozilla-develUpgrade linux-mozillaUpgrade zhCN-linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade linux-phoenixUpgrade ja-netscape7Upgrade mozillaUpgrade de-netscape7Upgrade linux-netscapeUpgrade ru-linux-mozillafirebirdUpgrade mozilla+ipv6Upgrade ja-linux-mozillafirebird-gtk1Upgrade mozilla-gtk1Upgrade mozilla-firebirdUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-thunderbirdUpgrade firefoxUpgrade mozilla-gtk2Upgrade linux-firefoxUpgrade de-linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade mozilla-gtkUpgrade pt_BR-netscape7Upgrade fr-linux-netscapeUpgrade el-linux-mozillafirebirdUpgrade fr-netscape7Upgrade linux-mozillafirebirdUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade phoenix | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox | Nov 8, 2024 | Jul 13, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub