Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."
References
| Link | Resource |
|---|---|
| ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt | |
| http://secunia.com/advisories/14938 | Patch Vendor Advisory |
| http://secunia.com/advisories/14992 | Patch Vendor Advisory |
| http://secunia.com/advisories/14996 | Patch Vendor Advisory |
| http://www.mikx.de/firesearching/ | Exploit |
| http://www.mozilla.org/security/announce/mfsa2005-38.html | Vendor Advisory |
| http://www.redhat.com/support/errata/RHSA-2005-383.html | Patch Vendor Advisory |
| http://www.redhat.com/support/errata/RHSA-2005-384.html | |
| http://www.redhat.com/support/errata/RHSA-2005-386.html | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/13211 | Exploit Patch |
| http://www.securityfocus.com/bid/15495 | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=290037 | Patch |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/20125 | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9961 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-05-02 04:00
Updated : 2017-10-11 01:30
NVD link : CVE-2005-1157
Mitre link : CVE-2005-1157
CVE.ORG link : CVE-2005-1157
JSON object : View
Products Affected
mozilla
- mozilla
- firefox
netscape
- navigator
CWE