VULNERABILITY INTELLIGENCE

CVE-2005-1476

CVSS score5.1 MEDIUM
EPSS probability16.70%
CISA KEVNot currently listed
Published2005-05-09
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.

Primary references