CVE-2005-1532: High severity Mozilla Firefox vulnerability
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1532?
CVE-2005-1532 is considered a moderate severity vulnerability due to the potential for unauthorized activities via insecure Javascript execution.
How do I fix CVE-2005-1532?
To fix CVE-2005-1532, you should update your Firefox or Mozilla Suite to versions 1.0.4 or 1.7.8 or later.
What types of software are affected by CVE-2005-1532?
CVE-2005-1532 affects multiple versions of Firefox up to 1.0.3 and various versions of Mozilla Suite.
What can attackers do with CVE-2005-1532?
Attackers can leverage CVE-2005-1532 to conduct unauthorized activities through non-DOM property overrides in the calling context.
Is there a workaround for CVE-2005-1532 until a patch is applied?
Currently, the best workaround for CVE-2005-1532 is to disable or limit the use of Javascript in the affected browsers.