PT-2005-2173 · Mozilla+2 · Suite+3
Michael Krax
·
Publicado
2005-04-18
·
Atualizado
2017-10-11
·
CVE-2005-1157
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 1.0.3
Mozilla Suite versions prior to 1.7.7
Netscape 7.2
Description
The issue allows remote attackers to replace existing search plugins with malicious ones, potentially leading to the execution of malicious scripts. This is achieved by using the
sidebar.addSearchEngine functionality with the same filename as the target engine, which may not be visible in the GUI.Recommendations
For Firefox versions prior to 1.0.3, update to version 1.0.3 or later.
For Mozilla Suite versions prior to 1.7.7, update to version 1.7.7 or later.
For Netscape 7.2, consider disabling the search plugin functionality until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Suite
Netscape
Red Hat