Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-embeddedUpgrade mozilla-gtk1Upgrade mozilla+ipv6Upgrade mozilla-gtk2Upgrade mozilla-thunderbirdUpgrade de-netscape7Upgrade pt_BR-netscape7Upgrade linux-mozillaUpgrade fr-netscape7Upgrade zhCN-linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade fr-linux-netscapeUpgrade ja-mozillafirebird-gtk2Upgrade mozilla-firebirdUpgrade linux-firefoxUpgrade zhTW-linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade ja-netscape7Upgrade linux-mozillafirebirdUpgrade ru-linux-mozillafirebirdUpgrade linux-phoenixUpgrade netscape7Upgrade ja-linux-mozillafirebird-gtk1Upgrade el-linux-mozillafirebirdUpgrade phoenixUpgrade mozilla-gtkUpgrade linux-mozilla-develUpgrade firefoxUpgrade mozillaUpgrade linux-netscapeUpgrade de-linux-mozillafirebird | Dec 10, 2025 | Jul 16, 2005 |
| Ubuntu | — | Upgrade mozilla-firefoxUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-nbUpgrade mozilla-thunderbirdUpgrade mozilla-firefox-locale-trUpgrade mozilla-browserUpgrade mozilla-firefox-locale-ja | Nov 8, 2024 | Jul 13, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub