CVE-2005-1159 | BDVDB-2026-9431 Detail
Description#
The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.redhat.com/support/errata/RHSA-2005-386.html
- http://secunia.com/advisories/14992
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20123
- https://bugzilla.mozilla.org/show_bug.cgi?id=290162
- http://secunia.com/advisories/19823
- http://securitytracker.com/id?1013742
- http://www.securityfocus.com/bid/15495
- http://www.redhat.com/support/errata/RHSA-2005-601.html
- http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml
- http://www.mozilla.org/security/announce/mfsa2005-40.html
- http://www.securityfocus.com/bid/13232
- http://securitytracker.com/id?1013743
- http://secunia.com/advisories/14938
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100018
- http://www.redhat.com/support/errata/RHSA-2005-384.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.