CVE-2005-0752
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute...
CVE-2005-0752 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published April 18, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.11%, the 90th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 4.11%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs | before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs | before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs | before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs | before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs | before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs | before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs | before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs | before 0:1.0.3-1.4.1 | 0:1.0.3-1.4.1 |
What each source reports
NVD Score used
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.
- Record
CVE-2005-0752- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.
- Record
CVE-2005-0752- Updated
- 2026-11-02
EUVDEUVD-2005-0753No score
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.
- Record
EUVD-2005-0753- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qcgx-hf6g-j7qvNo score
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute...
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.
- Record
GHSA-qcgx-hf6g-j7qv- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/13228
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100024
mozilla.org/security/announce/mfsa2005-34.html
secunia.com/advisories/14938
redhat.com/support/errata/RHSA-2005-383.html
Show 46 moreShow less
nvd.nist.gov/vuln/detail/CVE-2005-0752
github.com/advisories/GHSA-qcgx-hf6g-j7qv
access.redhat.com/errata/RHSA-2005:383
bugzilla.redhat.com/show_bug.cgi?id=155114
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_383.json
cve.org/CVERecord?id=CVE-2005-0752