Unrated severityNVD Advisory· Published May 9, 2005· Updated Jun 16, 2026
CVE-2005-1477
CVE-2005-1477
Description
The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
19- secunia.com/advisories/15292nvdPatch
- greyhatsecurity.org/firefox.htmnvdExploit
- greyhatsecurity.org/vulntests/ffrc.htmnvdExploit
- www.kb.cert.org/vuls/id/648758nvdUS Government Resource
- ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txtnvd
- marc.infonvd
- marc.infonvd
- securitytracker.com/idnvd
- www.mozilla.org/security/announce/mfsa2005-42.htmlnvd
- www.redhat.com/support/errata/RHSA-2005-434.htmlnvd
- www.redhat.com/support/errata/RHSA-2005-435.htmlnvd
- www.securityfocus.com/bid/13544nvd
- www.securityfocus.com/bid/15495nvd
- www.vupen.com/english/advisories/2005/0493nvd
- bugzilla.mozilla.org/show_bug.cginvd
- bugzilla.mozilla.org/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/20443nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100001nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9231nvd
News mentions
0No linked articles in our index yet.