CVE

Id
12360  
CVE No.
CVE-2005-1154  
Status
Candidate  
Description
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."  
Phase
Assigned (20050418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
88625 12360 CVE-2005-1154 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-36.html  View
88626 12360 CVE-2005-1154 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=289675  View
88627 12360 CVE-2005-1154 GENTOO:GLSA-200504-18  View
88628 12360 CVE-2005-1154 URL:http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml  View
88629 12360 CVE-2005-1154 REDHAT:RHSA-2005:383  View
88630 12360 CVE-2005-1154 URL:http://www.redhat.com/support/errata/RHSA-2005-383.html  View
88631 12360 CVE-2005-1154 REDHAT:RHSA-2005:386  View
88632 12360 CVE-2005-1154 URL:http://www.redhat.com/support/errata/RHSA-2005-386.html  View
88633 12360 CVE-2005-1154 REDHAT:RHSA-2005:384  View
88634 12360 CVE-2005-1154 URL:http://www.redhat.com/support/errata/RHSA-2005-384.html  View
88635 12360 CVE-2005-1154 SCO:SCOSA-2005.49  View
88636 12360 CVE-2005-1154 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt  View
88637 12360 CVE-2005-1154 BID:15495  View
88638 12360 CVE-2005-1154 URL:http://www.securityfocus.com/bid/15495  View
88639 12360 CVE-2005-1154 BID:13230  View
88640 12360 CVE-2005-1154 URL:http://www.securityfocus.com/bid/13230  View
88641 12360 CVE-2005-1154 OVAL:oval:org.mitre.oval:def:100022  View
88642 12360 CVE-2005-1154 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100022  View
88643 12360 CVE-2005-1154 OVAL:oval:org.mitre.oval:def:10339  View
88644 12360 CVE-2005-1154 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10339  View
88645 12360 CVE-2005-1154 SECUNIA:14938  View
88646 12360 CVE-2005-1154 URL:http://secunia.com/advisories/14938  View
88647 12360 CVE-2005-1154 SECUNIA:14992  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62015 JVNDB-2005-000217 Mozilla 製品に sidebar.addSearchEngine を使用する検索プラグインにおいて任意のスクリプトやコードを実行される脆弱性 ------------ CVE-2005-1156 12360 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000217.html  View