| Definition Id: oval:org.mitre.oval:def:100014 |
Date: 2007-03-06 |
| Title: |
Mozilla Script Privilege Context Vulnerabilities |
| Description: |
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160. |
| Version: |
5 |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2005-1532
|
| Family: |
windows |
| Platform(s): |
Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003 |
Product(s): |
mozilla
Mozilla Firefox |
| Definition Synopsis: |
- Mozilla Firefox version 1.0.3 or earlier is installed
- OR Mozilla Suite version 1.7.7 or earlier is installed
|
