CVE-2005-1158

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject...

5.0 Medium

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.

Exploit likelihood

1.25%Down 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.

Record: CVE-2005-1158
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.

Record: CVE-2005-1158
Updated: 2026-11-02

EUVDEUVD-2005-1161 No score

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.

Record: EUVD-2005-1161
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g384-9299-vj9w No score

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject...

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.

Record: GHSA-g384-9299-vj9w
Updated: 2026-11-02

Affected products

mozilla firefox

Affected packages

Affected packages
Package	Affected	Fixed
`firefox` Red Hat:enterprise_linux:4::as From an advisory covering 10 CVEs	before 0:1.0.3-1.4.1	0:1.0.3-1.4.1
`firefox-debuginfo` Red Hat:enterprise_linux:4::as From an advisory covering 10 CVEs	before 0:1.0.3-1.4.1	0:1.0.3-1.4.1
`firefox` Red Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs	before 0:1.0.3-1.4.1	0:1.0.3-1.4.1
`firefox-debuginfo` Red Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs	before 0:1.0.3-1.4.1	0:1.0.3-1.4.1
`firefox` Red Hat:enterprise_linux:4::es From an advisory covering 10 CVEs	before 0:1.0.3-1.4.1	0:1.0.3-1.4.1
`firefox-debuginfo` Red Hat:enterprise_linux:4::es From an advisory covering 10 CVEs	before 0:1.0.3-1.4.1	0:1.0.3-1.4.1
`firefox` Red Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs	before 0:1.0.3-1.4.1	0:1.0.3-1.4.1
`firefox-debuginfo` Red Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs	before 0:1.0.3-1.4.1	0:1.0.3-1.4.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1158 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published April 18, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.25%, the 69th percentile. No source names a fixed version.

References

Show 47 moreShow less