[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

252097

 
 

909

 
 

196747

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2005-1160Date: (C)2005-05-02   (M)2024-03-27


The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.1
Exploit Score: 4.9
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
BID-13233
SECUNIA-14938
SECUNIA-14992
BID-15495
SECUNIA-19823
GLSA-200504-18
RHSA-2005:383
RHSA-2005:384
RHSA-2005:386
RHSA-2005:601
SCOSA-2005.49
SUSE-SA:2006:004
http://www.mozilla.org/security/announce/mfsa2005-41.html
https://bugzilla.mozilla.org/show_bug.cgi?id=289074
https://bugzilla.mozilla.org/show_bug.cgi?id=289083
https://bugzilla.mozilla.org/show_bug.cgi?id=289961
oval:org.mitre.oval:def:100017
oval:org.mitre.oval:def:11291

CPE    34
cpe:/a:mozilla:mozilla:1.4
cpe:/a:mozilla:mozilla:1.3
cpe:/a:mozilla:mozilla:1.6
cpe:/a:mozilla:mozilla:1.5
...
OVAL    1
oval:org.mitre.oval:def:100017

© SecPod Technologies