Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-11 21:00
Updated : 2017-10-10 18:30
NVD link : CVE-2005-1532
Mitre link : CVE-2005-1532
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
mozilla
- firefox
- mozilla