{"id":"CVE-2005-1160","aliases":["DSA-781-1","EUVD-2005-1163","GHSA-r5gq-7c27-jhm8","RHSA-2005:383","RHSA-2005:386","RHSA-2005:601"],"status":"published","title":"The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows...","description":"The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02718,"percentile":0.8612,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-04-18T04:00:00Z","modified":"2026-06-26T10:03:31Z","affected":[{"source":"osv","ecosystem":"Debian:3.1","package":"mozilla-thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2.sarge1.0.6"}]}],"versions":["1.0.2-2"],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.4.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.4.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.4.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.4.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.4.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.4.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.4.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.4.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"mozilla"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=289083","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-386.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/14992","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100017","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","tags":["vendor-advisory","x_refsource_SCO","x_transferred"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-41.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19823","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/13233","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/15495","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=289074","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-601.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=289961","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/14938","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-384.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11291","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-383.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1160","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r5gq-7c27-jhm8"},{"url":"https://access.redhat.com/errata/RHSA-2005:383","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=155114","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_383.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617568","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0752","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617596","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0989","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0989","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617605","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1154","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1155","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617608","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1156","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617609","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1157","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617610","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1158","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1159","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617612","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1160","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:386","tags":["advisory"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=155116","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_386.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:601","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=163285","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_601.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1532","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617694","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2261","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2265","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617700","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2266","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617703","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2269","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2269","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2270","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-1160","description":"The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.","status":"published","published":"2005-04-18T04:00:00Z","modified":"2024-08-07T21:44:05.346Z","updated_at":"2026-11-02T14:33:39.586409Z"}],"euvd":[{"id":"EUVD-2005-1163","description":"The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.","status":"published","published":"2005-04-18T04:00:00Z","modified":"2024-08-07T21:44:05Z","updated_at":"2026-11-03T01:15:35.414401Z"}],"ghsa":[{"id":"GHSA-r5gq-7c27-jhm8","title":"The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows...","description":"The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.","status":"published","published":"2022-05-03T03:14:08Z","modified":"2023-02-01T05:01:09Z","updated_at":"2026-11-02T14:49:40.629091Z"}],"nvd":[{"id":"CVE-2005-1160","description":"The privileged \"chrome\" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.","status":"published","published":"2005-05-02T04:00:00Z","modified":"2026-06-16T22:12:33.567Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.266741Z"}],"osv":[{"id":"DSA-781-1","title":"mozilla-thunderbird - several","status":"published","published":"2005-08-23T00:00:00Z","modified":"2026-03-09T02:09:00.051519Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"RHSA-2005:383","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-17T00:33:48Z","modified":"2026-06-26T10:03:00Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:386","title":"Red Hat Security Advisory: Mozilla security update","status":"published","published":"2024-09-17T00:34:12Z","modified":"2026-06-26T10:03:01Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:601","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-15T15:41:58Z","modified":"2026-06-26T10:03:31Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}