RedhatCVELIST:CVE-2005-1160CVE-2005-1160
The privileged “chrome” UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.
References
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
secunia.com/advisories/14938
secunia.com/advisories/14992
secunia.com/advisories/19823
www.gentoo.org/security/en/glsa/glsa-200504-18.xml
www.mozilla.org/security/announce/mfsa2005-41.html
www.novell.com/linux/security/advisories/2006_04_25.html
www.redhat.com/support/errata/RHSA-2005-383.html
www.redhat.com/support/errata/RHSA-2005-384.html
www.redhat.com/support/errata/RHSA-2005-386.html
www.redhat.com/support/errata/RHSA-2005-601.html
www.securityfocus.com/bid/13233
www.securityfocus.com/bid/15495
bugzilla.mozilla.org/show_bug.cgi?id=289074
bugzilla.mozilla.org/show_bug.cgi?id=289083
bugzilla.mozilla.org/show_bug.cgi?id=289961
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100017
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11291
Related
