CVE-2005-1158: Medium severity Mozilla Firefox vulnerability
Published Apr 18, 2005
·Updated
Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the search target of the Firefox sidebar.
Affected Software
11 affected components
Mozilla Firefox=0.8
Mozilla Firefox=0.9
Mozilla Firefox=0.9-rc
Mozilla Firefox=0.9.1
Mozilla Firefox=0.9.2
Mozilla Firefox=0.9.3
Mozilla Firefox=0.10
Mozilla Firefox=0.10.1
Mozilla Firefox=1.0
Mozilla Firefox=1.0.1
Mozilla Firefox=1.0.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Apr 18, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1158?
CVE-2005-1158 is considered a critical vulnerability that allows remote code execution via arbitrary JavaScript injection.
2
How do I fix CVE-2005-1158?
To fix CVE-2005-1158, users should upgrade to Firefox version 1.0.3 or later.
3
What versions of Firefox are affected by CVE-2005-1158?
CVE-2005-1158 affects Firefox versions before 1.0.3, including 0.8, 0.9, and 1.0.2.
4
What are the potential impacts of exploiting CVE-2005-1158?
Exploitation of CVE-2005-1158 can lead to unauthorized access and manipulation of privileged web page data.
5
Who can exploit CVE-2005-1158?
Any remote attacker can exploit CVE-2005-1158 to inject malicious JavaScript into users' browsers.