Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade zhTW-linux-mozillafirebirdUpgrade fr-netscape7Upgrade mozilla+ipv6Upgrade de-netscape7Upgrade zhCN-linux-mozillafirebirdUpgrade linux-netscapeUpgrade de-linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade mozilla-gtkUpgrade phoenixUpgrade fr-linux-netscapeUpgrade ja-mozillafirebird-gtk2Upgrade mozillaUpgrade mozilla-firebirdUpgrade el-linux-mozillafirebirdUpgrade linux-mozillafirebirdUpgrade linux-firefoxUpgrade de-linux-netscapeUpgrade mozilla-gtk1Upgrade mozilla-thunderbirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade firefoxUpgrade linux-mozilla-develUpgrade pt_BR-netscape7Upgrade ja-netscape7Upgrade linux-phoenixUpgrade netscape7Upgrade ru-linux-mozillafirebirdUpgrade linux-mozillaUpgrade mozilla-embeddedUpgrade mozilla-gtk2 | Dec 10, 2025 | Sep 23, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox.Upgrade net-libs/gecko-sdk.Upgrade www-client/mozilla-bin. | Oct 30, 2017 | Sep 23, 2005 |
| Mfsa2005 58 | — | Upgrade to Mozilla Firefox version 1.7.12 | Oct 3, 2005 | Sep 23, 2005 |
| Suse | — | Upgrade mozilla-ircUpgrade mozilla-develUpgrade mozilla-mailUpgrade mozilla-csUpgrade mozilla-huUpgrade mozilla-jaUpgrade mozilla-venkmanUpgrade mozilla-calendarUpgrade mozilla-dom-inspectorUpgrade mozilla-koUpgrade mozilla-deatUpgrade mozilla | Feb 17, 2015 | Sep 23, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub