NVD

Id
66903  
Name
CVE-2005-1154  
Description
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2010-08-21  
Seq
2005-1154  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
347351 66903 CVE-2005-1154 SCOSA-2005.49  View
347352 66903 CVE-2005-1154 oval:org.mitre.oval:def:100022  View
347353 66903 CVE-2005-1154 oval:org.mitre.oval:def:10339  View
347354 66903 CVE-2005-1154 GLSA-200504-18  View
347355 66903 CVE-2005-1154 http://www.mozilla.org/security/announce/mfsa2005-36.html  View
347356 66903 CVE-2005-1154 RHSA-2005:383  View
347357 66903 CVE-2005-1154 RHSA-2005:384  View
347358 66903 CVE-2005-1154 RHSA-2005:386  View
347359 66903 CVE-2005-1154 13230  View
347360 66903 CVE-2005-1154 15495  View
347361 66903 CVE-2005-1154 https://bugzilla.mozilla.org/show_bug.cgi?id=289675  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62013 JVNDB-2005-000215 Mozilla 製品のグローバルスコープの汚染を利用したクロスサイトスクリプティングの脆弱性 ------------ CVE-2005-1154 12358 CVE-2005-1154 66903 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000215.html 2005-03-31 2007-04-01 View