Vulnerability Description
The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | 0.8 |
| Mozilla | Mozilla | 1.3 |
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
- http://secunia.com/advisories/14938PatchVendor Advisory
- http://secunia.com/advisories/14992PatchVendor Advisory
- http://secunia.com/advisories/19823
- http://securitytracker.com/id?1013742Patch
- http://securitytracker.com/id?1013743Patch
- http://www.gentoo.org/security/en/glsa/glsa-200504-18.xmlPatchVendor Advisory
- http://www.mozilla.org/security/announce/mfsa2005-40.htmlVendor Advisory
- http://www.novell.com/linux/security/advisories/2006_04_25.html
- http://www.redhat.com/support/errata/RHSA-2005-383.htmlPatchVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-384.html
- http://www.redhat.com/support/errata/RHSA-2005-386.htmlPatchVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-601.html
- http://www.securityfocus.com/bid/13232Patch
- http://www.securityfocus.com/bid/15495
FAQ
What is CVE-2005-1159?
CVE-2005-1159 is a vulnerability with a CVSS score of 7.5 (HIGH). The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Jav...
How severe is CVE-2005-1159?
CVE-2005-1159 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-1159?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Mozilla.