VULNERABILITY INTELLIGENCE
CVE-2005-1532
CVSS score7.5 HIGH
EPSS probability9.47%
CISA KEVNot currently listed
Published2005-05-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.