← back
CVE-2005-1476

CVE-2005-1476

EPSS 16.7%
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/986unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txthttp://greyhatsecurity.org/firefox.htmhttp://greyhatsecurity.org/vulntests/ffrc.htmhttp://marc.info/?l=full-disclosure&m=111553138007647&w=2http://marc.info/?l=full-disclosure&m=111556301530553&w=2https://bugzilla.mozilla.org/show_bug.cgi?id=292691https://bugzilla.mozilla.org/show_bug.cgi?id=293302http://secunia.com/advisories/15292http://securitytracker.com/id?1013913https://exchange.xforce.ibmcloud.com/vulnerabilities/20443https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100002https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045