CVE-2005-1531
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security...
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."
Exploit likelihood
What each source reports
NVD Score used
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."
- Record
CVE-2005-1531- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."
- Record
CVE-2005-1531- Updated
- 2026-11-02
EUVDEUVD-2005-1534 No score
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."
- Record
EUVD-2005-1534- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q7v5-vf67-fpfr No score
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security...
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."
- Record
GHSA-q7v5-vf67-fpfr- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.4-1.4.1 | 0:1.0.4-1.4.1 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:0.9.2-2.4.5 | 0:0.9.2-2.4.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1531 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published May 12, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.29%, the 88th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10351
redhat.com/support/errata/RHSA-2005-435.html
securityfocus.com/bid/13641
securitytracker.com/id?1013963
Show 30 moreShow less
mozilla.org/security/announce/mfsa2005-43.html
vupen.com/english/advisories/2005/0530
nvd.nist.gov/vuln/detail/CVE-2005-1531
github.com/advisories/GHSA-q7v5-vf67-fpfr
access.redhat.com/errata/RHSA-2005:434
bugzilla.redhat.com/show_bug.cgi?id=157347
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_434.json
cve.org/CVERecord?id=CVE-2005-1476