NetSight
IP …
high7.5

CVE-2005-1531

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to …

Impact

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3, 0.10
MozillaMozilla
through 1.4
Versions 1.4.1, 1.5, 1.5.1, 1.6, 1.7

References