Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-gtkUpgrade linux-firefoxUpgrade mozilla+ipv6Upgrade ja-linux-mozillafirebird-gtk1Upgrade mozilla-firebirdUpgrade fr-netscape7Upgrade pt_BR-netscape7Upgrade mozilla-embeddedUpgrade de-linux-netscapeUpgrade zhTW-linux-mozillafirebirdUpgrade mozilla-gtk1Upgrade netscape7Upgrade de-netscape7Upgrade linux-phoenixUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-gtk2Upgrade mozilla-thunderbirdUpgrade zhCN-linux-mozillafirebirdUpgrade phoenixUpgrade linux-mozilla-develUpgrade de-linux-mozillafirebirdUpgrade linux-netscapeUpgrade mozillaUpgrade ja-linux-netscapeUpgrade linux-mozillaUpgrade el-linux-mozillafirebirdUpgrade ru-linux-mozillafirebirdUpgrade firefoxUpgrade linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade ja-netscape7 | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-nbUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-ja | Nov 8, 2024 | Jul 13, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub