CVE-2005-1157

Fixed in a distro release EPSS 2%

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."

Published 2005-04-18 · CVE record · OSV

Products: mozilla firefox, mozilla, netscape navigator

Distro releases