NVD

Id
67215  
Name
CVE-2005-1477  
Description
The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-09  
Modified Date
2017-07-10  
Seq
2005-1477  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
348618 67215 CVE-2005-1477 SCOSA-2005.49  View
348619 67215 CVE-2005-1477 http://greyhatsecurity.org/firefox.htm  View
348620 67215 CVE-2005-1477 http://greyhatsecurity.org/vulntests/ffrc.htm  View
348621 67215 CVE-2005-1477 20050508 Firefox Remote Compromise Leaked  View
348622 67215 CVE-2005-1477 20050508 Firefox Remote Compromise Technical Details  View
348623 67215 CVE-2005-1477 oval:org.mitre.oval:def:100001  View
348624 67215 CVE-2005-1477 oval:org.mitre.oval:def:9231  View
348625 67215 CVE-2005-1477 1013913  View
348626 67215 CVE-2005-1477 VU#648758  View
348627 67215 CVE-2005-1477 http://www.mozilla.org/security/announce/mfsa2005-42.html  View
348628 67215 CVE-2005-1477 RHSA-2005:434  View
348629 67215 CVE-2005-1477 RHSA-2005:435  View
348630 67215 CVE-2005-1477 13544  View
348631 67215 CVE-2005-1477 15495  View
348632 67215 CVE-2005-1477 ADV-2005-0493  View
348633 67215 CVE-2005-1477 mozilla-javascript-code-execution(20443)  View
348634 67215 CVE-2005-1477 https://bugzilla.mozilla.org/show_bug.cgi?id=292691  View
348635 67215 CVE-2005-1477 https://bugzilla.mozilla.org/show_bug.cgi?id=293302  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62114 JVNDB-2005-000316 Mozilla Firefox における特権ページのコンテキストでスクリプトを実行される脆弱性 ------------ CVE-2005-1477 12681 CVE-2005-1477 67215 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000316.html 2005-05-07 2007-04-01 View