PT-2005-2172
CVE-2005-1156
·
تاريخ النشر
2005-04-18
·
تاريخ التحديث
2017-10-11
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Suite versions prior to 1.7.7
Firefox versions prior to 1.0.3
Netscape 7.2
Description
The issue allows remote attackers to execute arbitrary script and code via a new search plugin using the
sidebar.addSearchEngine function.Recommendations
For Mozilla Suite versions prior to 1.7.7, update to version 1.7.7 or later.
For Firefox versions prior to 1.0.3, update to version 1.0.3 or later.
For Netscape 7.2, consider disabling the
sidebar.addSearchEngine function as a temporary workaround until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾