CVE-2005-1476: Medium severity Mozilla Firefox vulnerability
Published May 9, 2005
·Updated
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
Affected Software
1 affected component
Mozilla Firefox<=1.0.3
Remediation
Patch Available
Event History
May 9, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1476?
CVE-2005-1476 is considered a high severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2005-1476?
To fix CVE-2005-1476, upgrade Firefox to version 1.0.4 or later.
3
Which versions of Firefox are affected by CVE-2005-1476?
CVE-2005-1476 affects all versions of Firefox prior to 1.0.4.
4
What are the potential risks of CVE-2005-1476?
The risks of CVE-2005-1476 include unauthorized execution of JavaScript from other domains, leading to possible data theft or system compromise.
5
Is CVE-2005-1476 related to any other vulnerabilities?
Yes, CVE-2005-1476 is related to CVE-2005-1477, which may compound its impact.