VDB
CVE-2005-1532
CVE-2005-1532
PUBLISHED
CVSS 7.5 HIGH
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
EPSS 9.47% · 95.4th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
9.47%
95.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mozilla | mozilla | 1.7, 1.3, 1.4 |
| mozilla | firefox | 0.10, 0.8, 0.9 |
| n/a | n/a | n/a |
Timeline
- May 12, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 1, 2023 EPSS Score
References
- http://www.mozilla.org/security/announce/mfsa2005-44.html url
- 13645 vdb
- RHSA-2005:434 vendor-advisory
- RHSA-2005:435 vendor-advisory
- RHSA-2005:601 vendor-advisory
- ADV-2005-0530 vdb
- SUSE-SA:2006:022 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2005-1532 advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100014 url
- http://securitytracker.com/id?1013964 url
- http://www.securityfocus.com/bid/15495 url
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10791 technical
- http://secunia.com/advisories/19823 technical
- http://securitytracker.com/id?1013965 technical