CVE

Id
12363  
CVE No.
CVE-2005-1157  
Status
Candidate  
Description
Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."  
Phase
Assigned (20050418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
88704 12363 CVE-2005-1157 MISC:http://www.mikx.de/firesearching/  View
88705 12363 CVE-2005-1157 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-38.html  View
88706 12363 CVE-2005-1157 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=290037  View
88707 12363 CVE-2005-1157 REDHAT:RHSA-2005:383  View
88708 12363 CVE-2005-1157 URL:http://www.redhat.com/support/errata/RHSA-2005-383.html  View
88709 12363 CVE-2005-1157 REDHAT:RHSA-2005:386  View
88710 12363 CVE-2005-1157 URL:http://www.redhat.com/support/errata/RHSA-2005-386.html  View
88711 12363 CVE-2005-1157 REDHAT:RHSA-2005:384  View
88712 12363 CVE-2005-1157 URL:http://www.redhat.com/support/errata/RHSA-2005-384.html  View
88713 12363 CVE-2005-1157 SCO:SCOSA-2005.49  View
88714 12363 CVE-2005-1157 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt  View
88715 12363 CVE-2005-1157 BID:13211  View
88716 12363 CVE-2005-1157 URL:http://www.securityfocus.com/bid/13211  View
88717 12363 CVE-2005-1157 BID:15495  View
88718 12363 CVE-2005-1157 URL:http://www.securityfocus.com/bid/15495  View
88719 12363 CVE-2005-1157 OVAL:oval:org.mitre.oval:def:9961  View
88720 12363 CVE-2005-1157 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9961  View
88721 12363 CVE-2005-1157 SECUNIA:14938  View
88722 12363 CVE-2005-1157 URL:http://secunia.com/advisories/14938  View
88723 12363 CVE-2005-1157 SECUNIA:14992  View
88724 12363 CVE-2005-1157 URL:http://secunia.com/advisories/14992  View
88725 12363 CVE-2005-1157 SECUNIA:14996  View
88726 12363 CVE-2005-1157 URL:http://secunia.com/advisories/14996  View
88727 12363 CVE-2005-1157 XF:mozilla-plugin-xss(20125)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62018 JVNDB-2005-000220 Mozilla 製品の InstallTrigger における JavaScript インタプリタがメモリ内の誤った場所にジャンプしてしまう脆弱性 ------------ CVE-2005-1159 12363 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000220.html  View