VULNERABILITY INTELLIGENCE

CVE-2005-2262

CVSS score5.1 MEDIUM
EPSS probability6.55%
CISA KEVNot currently listed
Published2005-07-13
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."

Primary references