PT-2005-2472
CVE-2005-1476
·
Published
2005-05-09
·
Updated
2017-10-11
Description by
CVSS 2.0
5.1
MediumMetricsAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Firefox version 1.0.3
Description:
The issue allows remote attackers to execute arbitrary Javascript in other domains. This is achieved by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution.
Recommendations:
For Firefox version 1.0.3, update to a newer version to mitigate the risk.
Found an issue in the description? Have something to add? Feel free to write us 👾