Open Vulnerability and Assessment Language (OVAL)
Contact Us Downloads News July 2, 2009 Search
link to OVAL home page

View Definition

Definition Id: oval:org.mitre.oval:def:100023 Date: 2007-04-23
Title: Mozilla blocked javascript: popup Privilege Escalation Vulnerability
Description: Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option.
Version: 5 Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2005-1153
Family: windows
Platform(s): Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Product(s): mozilla
Mozilla Firefox
Definition Synopsis:

OVAL is CVE Compatible