CVE-2005-1159

Firefox <1.0.3 & Mozilla Suite <1.7.7 - Memory Corruption

Title source: llm
STIX 2.1

Description

The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.

References (19)

Core 19
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-386.html
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/14992
Various Sources vendor-advisory x_refsource_sco
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/20123
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19823
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1013742
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15495
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-601.html
Patch, Vendor Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml
Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/mfsa2005-40.html
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13232
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1013743
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/14938
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100018
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-384.html
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-383.html
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_04_25.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10629

Scores

EPSS 0.0295
EPSS Percentile 85.6%

Details

Status published
Products (22)
mozilla/firefox 0.8
mozilla/firefox 0.9 (2 CPE variants)
mozilla/firefox 0.9.1
mozilla/firefox 0.9.2
mozilla/firefox 0.9.3
mozilla/firefox 0.10
mozilla/firefox 0.10.1
mozilla/firefox 1.0
mozilla/firefox 1.0.1
mozilla/firefox 1.0.2
... and 12 more
Published May 02, 2005
Tracked Since Feb 18, 2026