NVD

Id
73896  
Name
CVE-2003-0791  
Description
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-10-07  
Modified Date
2008-09-10  
Seq
2003-0791  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
379915 73896 CVE-2003-0791 MDKSA-2004:021  View
379916 73896 CVE-2003-0791 SCOSA-2004.8  View
379917 73896 CVE-2003-0791 9322  View
379918 73896 CVE-2003-0791 https://bugzilla.mozilla.org/show_bug.cgi?id=221526  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63657 JVNDB-2003-000383 Mozilla の Script.prototype.thaw 関数における任意のコードを実行される脆弱性 Mozilla に含まれる JavaScript の Script.prototype.thaw には、シリアライズの際に OS に依存するネイティブの関数を呼び出す、あるいは、ネイティブのコードが実行できる脆弱性が存在します。 CVE-2003-0791 7614 CVE-2003-0791 73896 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000383.html 2003-12-31 2007-04-01 View