Vulnerabilities > Mozilla > Firefox > 1.0.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-07-13 | CVE-2005-2264 | Unspecified vulnerability in Mozilla Firefox Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL. | 7.5 |
| 2005-07-13 | CVE-2005-2263 | Unspecified vulnerability in Mozilla Firefox and Mozilla The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation. | 5.0 |
| 2005-07-13 | CVE-2005-2261 | Unspecified vulnerability in Mozilla Firefox, Mozilla and Thunderbird Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection. | 7.5 |
| 2005-07-13 | CVE-2005-2260 | Unspecified vulnerability in Mozilla Firefox and Mozilla The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user. | 7.5 |
| 2005-05-12 | CVE-2005-1532 | Permissions, Privileges, and Access Controls vulnerability in Mozilla Firefox and Mozilla Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160. | 7.5 |
| 2005-05-12 | CVE-2005-1531 | Script Manager Security Bypass vulnerability in Mozilla Suite And Firefox Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant." | 7.5 |
| 2005-05-09 | CVE-2005-1476 | Remote Arbitrary Code Execution vulnerability in Mozilla Firefox Install Method Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477. | 5.1 |
| 2005-05-02 | CVE-2005-1160 | Unspecified vulnerability in Mozilla Firefox and Mozilla The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object. | 5.1 |
| 2005-05-02 | CVE-2005-1159 | Unspecified vulnerability in Mozilla Firefox and Mozilla The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type. | 7.5 |
| 2005-05-02 | CVE-2005-1158 | Unspecified vulnerability in Mozilla Firefox Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar. | 5.0 |