CVE-2005-1154
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary...
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."
Exploit likelihood
What each source reports
NVD Score used
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."
- Record
CVE-2005-1154- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."
- Record
CVE-2005-1154- Updated
- 2026-11-02
EUVDEUVD-2005-1157 No score
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."
- Record
EUVD-2005-1157- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xrcj-fc8v-w45w No score
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary...
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."
- Record
GHSA-xrcj-fc8v-w45w- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:0.9.2-2.4.4 | 0:0.9.2-2.4.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1154 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published April 18, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.16%, the 82nd percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2005-386.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100022
secunia.com/advisories/14992
securityfocus.com/bid/13230
gentoo.org/security/en/glsa/glsa-200504-18.xml
Show 55 moreShow less
mozilla.org/security/announce/mfsa2005-36.html
bugzilla.mozilla.org/show_bug.cgi?id=289675
nvd.nist.gov/vuln/detail/CVE-2005-1154
github.com/advisories/GHSA-xrcj-fc8v-w45w
access.redhat.com/errata/RHSA-2005:383
bugzilla.redhat.com/show_bug.cgi?id=155114
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_383.json
cve.org/CVERecord?id=CVE-2005-0752