Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Firefox and Mozilla Suite older versions run unsafe scripts

CVE-2005-1532 · published 21 years ago
Summary

Versions of Firefox before 1.0.4 and Mozilla Suite before 1.7.8 can be tricked by a web page into executing JavaScript with more privileges than it should have. This can let a remote attacker perform actions on behalf of the user, such as accessing private information. Upgrade Firefox and Mozilla Suite to the latest releases to close this gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
mozilla firefox 0.8
0.9
0.9.1
0.9.2
0.9.3
0.10
0.10.1
1.0
1.0.1
1.0.2
1.0.3
cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*
mozilla mozilla 1.3
1.4
1.4.1
1.5
1.5.1
1.6
1.7
1.7.1
1.7.2
1.7.3
1.7.5
1.7.6
1 more version range
cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*
Original advisory text
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthori...
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
9% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published12 May 2005
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2005-1532 · NVD
Track software like this
Free during beta