CVE-2003-0791 | BDVDB-2026-9351 Detail

Description#

The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.mandriva.com/security/advisories?name=MDKSA-2004:021
http://www.osvdb.org/8390
http://secunia.com/advisories/11103/
http://www.securityfocus.com/bid/9322
https://bugzilla.mozilla.org/show_bug.cgi?id=221526
http://www.securityfocus.com/advisories/6979

Exploit#

No public exploit known

History#

Version 12005-04-14Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.