CVE-2005-1157

Firefox - Search Plugin Replacement via sidebar.addSearchEngine

Title source: llm
STIX 2.1

Description

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."

References (14)

Core 14
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-386.html
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/14992
Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/mfsa2005-38.html
Various Sources vendor-advisory x_refsource_sco
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15495
Exploit x_refsource_misc
http://www.mikx.de/firesearching/
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/14938
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/20125
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-384.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9961
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-383.html
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13211
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/14996

Scores

EPSS 0.0246
EPSS Percentile 82.7%

Details

Status published
Products (23)
mozilla/firefox 0.8
mozilla/firefox 0.9 (2 CPE variants)
mozilla/firefox 0.9.1
mozilla/firefox 0.9.2
mozilla/firefox 0.9.3
mozilla/firefox 0.10
mozilla/firefox 0.10.1
mozilla/firefox 1.0
mozilla/firefox 1.0.1
mozilla/firefox 1.0.2
... and 13 more
Published May 02, 2005
Tracked Since Feb 18, 2026