Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."
References
Link | Resource |
---|---|
http://www.mikx.de/firesearching/ | Exploit |
http://www.mozilla.org/security/announce/mfsa2005-38.html | Vendor Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=290037 | Patch |
http://www.redhat.com/support/errata/RHSA-2005-383.html | Patch Vendor Advisory |
http://www.redhat.com/support/errata/RHSA-2005-386.html | Patch Vendor Advisory |
http://www.securityfocus.com/bid/13211 | Exploit Patch |
http://secunia.com/advisories/14938 | Patch Vendor Advisory |
http://secunia.com/advisories/14992 | Patch Vendor Advisory |
http://secunia.com/advisories/14996 | Patch Vendor Advisory |
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt | |
http://www.securityfocus.com/bid/15495 | |
http://www.redhat.com/support/errata/RHSA-2005-384.html | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/20125 | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9961 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-01 21:00
Updated : 2017-10-10 18:30
NVD link : CVE-2005-1157
Mitre link : CVE-2005-1157
JSON object : View
CWE
Products Affected
mozilla
- firefox
- mozilla
netscape
- navigator