CVE-2005-2263

security flaw

Published Jul 13, 2005 CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Description
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2005-2264 The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.
Ubuntu USN Ubuntu USN USN-149-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-149-3 Ubuntu 4.10 update for Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-155-1 Mozilla vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 10:22 PM
Reserved
Jul 13, 2005, 12:00 AM
Status
Modified
Published
Jul 13, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:14 PM
Severity
Moderate
Public date
Jul 12, 2005, 12:00 AM