{"id":"CVE-2005-1532","aliases":["DSA-781-1","EUVD-2005-1535","GHSA-ffv2-fj33-mvch","RHSA-2005:434","RHSA-2005:435","RHSA-2005:601"],"status":"published","title":"Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of...","description":"Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via \"non-DOM property overrides,\" a variant of CVE-2005-1160.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09473,"percentile":0.95466,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-264"],"published":"2005-05-12T04:00:00Z","modified":"2026-06-26T10:03:31Z","exploits":[{"source":"exploitdb","id":"EDB-25670","title":"Mozilla Suite And Firefox - DOM Property Overrides Code Execution","type":"remote","platform":"multiple","date":"2005-05-16","verified":true,"url":"https://www.exploit-db.com/exploits/25670"}],"affected":[{"source":"osv","ecosystem":"Debian:3.1","package":"mozilla-thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-2.sarge1.0.6"}]}],"versions":["1.0.2-2"],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.4.1"}]}],"bundled":9}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"mozilla"}],"references":[{"url":"http://www.mozilla.org/security/announce/mfsa2005-44.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","tags":["vendor-advisory","x_refsource_SCO","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-435.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/19823","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://securitytracker.com/id?1013964","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/15495","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100014","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-601.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://securitytracker.com/id?1013965","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/13645","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10791","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2005/0530","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-434.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1532","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ffv2-fj33-mvch"},{"url":"https://access.redhat.com/errata/RHSA-2005:434","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox1.0.4","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=157347","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_434.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617651","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1476","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1477","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1531","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1532","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:435","tags":["advisory"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.8","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=157349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=158533","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_435.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:601","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=163285","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_601.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617596","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0989","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0989","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1159","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617612","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1160","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617694","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2261","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2265","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617700","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2266","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617703","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2269","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2269","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2270","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-1532","description":"Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via \"non-DOM property overrides,\" a variant of CVE-2005-1160.","status":"published","published":"2005-05-12T04:00:00Z","modified":"2024-08-07T21:51:50.289Z","updated_at":"2026-11-02T14:33:39.586409Z"}],"euvd":[{"id":"EUVD-2005-1535","description":"Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via \"non-DOM property overrides,\" a variant of CVE-2005-1160.","status":"published","published":"2005-05-12T04:00:00Z","modified":"2024-08-07T21:51:50Z","updated_at":"2026-11-03T01:15:33.650851Z"}],"ghsa":[{"id":"GHSA-ffv2-fj33-mvch","title":"Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of...","description":"Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via \"non-DOM property overrides,\" a variant of CVE-2005-1160.","status":"published","published":"2022-05-03T03:14:11Z","modified":"2023-02-01T05:01:10Z","updated_at":"2026-11-02T14:49:41.113902Z"}],"nvd":[{"id":"CVE-2005-1532","description":"Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via \"non-DOM property overrides,\" a variant of CVE-2005-1160.","status":"published","published":"2005-05-12T04:00:00Z","modified":"2026-06-16T22:13:13.32Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:00:55.266741Z"}],"osv":[{"id":"DSA-781-1","title":"mozilla-thunderbird - several","status":"published","published":"2005-08-23T00:00:00Z","modified":"2026-03-09T02:09:00.051519Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"RHSA-2005:434","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-15T15:32:15Z","modified":"2026-06-26T10:03:14Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:435","title":"Red Hat Security Advisory: mozilla security update","status":"published","published":"2024-11-05T16:31:35Z","modified":"2026-06-26T10:03:14Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:601","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-15T15:41:58Z","modified":"2026-06-26T10:03:31Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}