peter bassill · operator
$ cve CVE-2005-1532 JSON

CVE-2005-1532 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 9.5% (pctl 95)

Patch early

A public exploit exists.

Description

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS9.47% — more likely to be exploited than 95% of all CVEs
WeaknessCWE-264
On CISA KEVno
Public exploityes
Published2005-05-12
Last modified2026-06-16

Affected (2)

VendorProduct
mozillafirefox
mozillamozilla

Public exploits

SourceTitleDate
exploit-dbMozilla Suite And Firefox - DOM Property Overrides Code Execution2005-05-16

References

→ the Explorer  ·  watch your stack  ·  NVD