Oval Definition:oval:org.mitre.oval:def:10791
Revision Date:2013-04-29Version:11
Title:Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
Description:Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-1532
Platform(s):CentOS Linux 3
CentOS Linux 4
Oracle Linux 4
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Product(s):
Definition Synopsis
  • OS Section: RHEL3, CentOS3
  • RHEL3 or CentOS3
  • The operating system installed on the system is Red Hat Enterprise Linux 3
  • OR CentOS Linux 3.x
  • AND Configuration section
  • mozilla-js-debugger is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla-chat is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla-mail is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla-dom-inspector is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla-devel is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla-nss is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla-nss-devel is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla-nspr is earlier than 37:1.7.8-1.1.3.1
  • OR mozilla-nspr-devel is earlier than 37:1.7.8-1.1.3.1
  • OR OS Section: RHEL4, CentOS4, Oracle Linux 4
  • RHEL4, CentOS4 or Oracle Linux 4
  • The operating system installed on the system is Red Hat Enterprise Linux 4
  • OR CentOS Linux 4.x
  • OR Oracle Linux 4.x
  • AND Configuration section
  • mozilla-js-debugger is earlier than 37:1.7.8-1.4.1
  • OR devhelp-devel is earlier than 0:0.9.2-2.4.5
  • OR mozilla is earlier than 37:1.7.8-1.4.1
  • OR thunderbird is earlier than 0:1.0.6-1.4.1
  • OR mozilla-chat is earlier than 37:1.7.8-1.4.1
  • OR mozilla-mail is earlier than 37:1.7.8-1.4.1
  • OR mozilla-dom-inspector is earlier than 37:1.7.8-1.4.1
  • OR devhelp is earlier than 0:0.9.2-2.4.5
  • OR mozilla-nss is earlier than 37:1.7.8-1.4.1
  • OR mozilla-devel is earlier than 37:1.7.8-1.4.1
  • OR mozilla-nss-devel is earlier than 37:1.7.8-1.4.1
  • OR firefox is earlier than 0:1.0.4-1.4.1
  • OR mozilla-nspr is earlier than 37:1.7.8-1.4.1
  • OR mozilla-nspr-devel is earlier than 37:1.7.8-1.4.1
    • BACK