VDB
CVE-2005-1159
CVE-2005-1159
PUBLISHED
CVSS 7.5 HIGH
The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.
EPSS 2.95% · 87.0th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
2.95%
87.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| mozilla | firefox | 0.8, 0.9, 1.0 |
| mozilla | mozilla | 1.7, 1.7, 1.7.1 |
Timeline
- Apr 18, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=290162 url
- http://www.mozilla.org/security/announce/mfsa2005-40.html url
- oval:org.mitre.oval:def:100018 vdb
- RHSA-2005:383 vendor-advisory
- 1013742 vdb
- 1013743 vdb
- SUSE-SA:2006:022 vendor-advisory
- oval:org.mitre.oval:def:10629 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2005-1159 advisory
- http://secunia.com/advisories/14992 url
- http://secunia.com/advisories/19823 url
- http://www.redhat.com/support/errata/RHSA-2005-384.html url
- http://www.redhat.com/support/errata/RHSA-2005-601.html url
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt technical
- http://secunia.com/advisories/14938 patch
- http://www.securityfocus.com/bid/13232 patch
- http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml patch
- http://www.redhat.com/support/errata/RHSA-2005-386.html patch
- http://www.securityfocus.com/bid/15495 technical
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20123 technical