Oval Definition:oval:org.mitre.oval:def:100014
Revision Date:2007-03-21Version:5
Title:Mozilla Script Privilege Context Vulnerabilities
Description:Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-1532
Platform(s):Microsoft Windows 2000
Microsoft Windows NT
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):mozilla
Mozilla Firefox
Definition Synopsis
  • Mozilla Firefox version 1.0.3 or earlier is installed
  • Firefox version 1.0.3 or earlier is installed
  • AND Mozilla Firefox version 1.0.3 or earlier is installed
  • OR Mozilla Suite version 1.7.7 or earlier is installed
  • Mozilla Suite version 1.7.7 or earlier is installed
  • AND Mozilla Suite version 1.7.7 or earlier is installed
    • BACK