| Definition Id: oval:org.mitre.oval:def:100018 |
Date: 2007-04-23 |
| Title: |
Mozilla InstallTrigger Instance Validation Vulnerability |
| Description: |
The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type. |
| Version: |
5 |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2005-1159
|
| Family: |
windows |
| Platform(s): |
Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003 |
Product(s): |
mozilla
Mozilla Firefox |
| Definition Synopsis: |
- Mozilla Firefox version 1.0.2 or earlier is installed
- OR Mozilla Suite version 1.7.6 or earlier is installed
|
