CVE-2005-1476
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using...
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
Exploit likelihood
What each source reports
NVD Score used
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
- Record
CVE-2005-1476- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
- Record
CVE-2005-1476- Updated
- 2026-11-02
EUVDEUVD-2005-1479 No score
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
- Record
EUVD-2005-1479- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-364v-59j7-j8j2 No score
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using...
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
- Record
GHSA-364v-59j7-j8j2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Mozilla Firefox 1.0.3 - Install Method Arbitrary Code Execution | 2005-05-07 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1476 is a medium vulnerability (CVSS 5.1) in Mozilla Firefox, published May 9, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 16.7%, the 97th percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/534710
bugzilla.mozilla.org/show_bug.cgi?id=292691
redhat.com/support/errata/RHSA-2005-435.html
securitytracker.com/id?1013913
secunia.com/advisories/15292
securityfocus.com/bid/15495
Show 38 moreShow less
marc.info?l=full-disclosure&m=111556301530553&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045
greyhatsecurity.org/vulntests/ffrc.htm
mozilla.org/security/announce/mfsa2005-42.html
exchange.xforce.ibmcloud.com/vulnerabilities/20443
vupen.com/english/advisories/2005/0493
nvd.nist.gov/vuln/detail/CVE-2005-1476
github.com/advisories/GHSA-364v-59j7-j8j2
access.redhat.com/errata/RHSA-2005:434
bugzilla.redhat.com/show_bug.cgi?id=157347
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_434.json
cve.org/CVERecord?id=CVE-2005-1476