VDB
CVE-2005-1157
CVE-2005-1157
PUBLISHED
CVSS 7.5 HIGH
Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."
EPSS 2.46% · 84.3th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
2.46%
84.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| netscape | navigator | 7.2 |
| mozilla | mozilla | 1.3, 1.5, 1.5 |
| mozilla | firefox | 0.9.3, 0.10.1, 1.0.1 |
Timeline
- Apr 18, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
References
- 14992 third-party-advisory
- RHSA-2005:383 vendor-advisory
- RHSA-2005:386 vendor-advisory
- 15495 vdb
- oval:org.mitre.oval:def:9961 vdb
- 14996 third-party-advisory
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt technical
- http://www.mikx.de/firesearching/ exploit
- http://www.mozilla.org/security/announce/mfsa2005-38.html advisory
- http://www.securityfocus.com/bid/13211 exploit
- http://secunia.com/advisories/14938 patch
- http://www.redhat.com/support/errata/RHSA-2005-384.html technical
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20125 technical
- https://nvd.nist.gov/vuln/detail/CVE-2005-1157 advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=290037 url
- http://www.mikx.de/firesearching url