Vulnerability in Mozilla Firefox
CVE-2005-1937
A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718.
EPSS: 0.026 (83.7th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox — versions 1.0.3
- Mozilla — versions 1.7.7
- N/a — versions n/a
References
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (vendor-advisory, x_refsource_SUSE)
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (x_refsource_CONFIRM)
- security@debian.org (x_refsource_FEDORA, vendor-advisory)
- security@debian.org (x_refsource_OVAL, signature, vdb-entry)
- security@debian.org (x_refsource_REDHAT, vendor-advisory)
- security@debian.org (x_refsource_CONFIRM)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
- security@debian.org (x_refsource_OVAL, signature, vdb-entry)