CVE-2003-0791
Last modified
CVE-2003-0791 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.. EPSS estimates a 2.13% chance of exploitation in the next 30 days.
Description
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Mozilla | <= 1.4 |
| Sco | Openserver | 5.0.7 |
References
- http://secunia.com/advisories/11103/URL Repurposed
- http://www.osvdb.org/8390Broken Link, Patch, Vendor Advisory
- http://www.securityfocus.com/advisories/6979Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/9322Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=221526Issue Tracking, Patch, Vendor Advisory
- http://secunia.com/advisories/11103/URL Repurposed
- http://www.osvdb.org/8390Broken Link, Patch, Vendor Advisory
- http://www.securityfocus.com/advisories/6979Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/9322Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=221526Issue Tracking, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2003-0791?
How severe is CVE-2003-0791?
How do I fix CVE-2003-0791?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2003
- CVE-2003-0785ipmasq before 3.5.12, in certain configurations, may forward…
- CVE-2003-0786The SSH1 PAM challenge response authentication in OpenSSH 3.…
- CVE-2003-0787The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 i…
- CVE-2003-0788Unknown vulnerability in the Internet Printing Protocol (IPP…
- CVE-2003-0789mod_cgid in Apache before 2.0.48, when using a threaded MPM,…
- CVE-2003-0790Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2003-0792Fetchmail 6.2.4 and earlier does not properly allocate memor…
- CVE-2003-0793GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does…
- CVE-2003-0794GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does…
- CVE-2003-0795The vty layer in Quagga before 0.96.4, and Zebra 0.93b and e…
- CVE-2003-0796Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through …
- CVE-2003-0797Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through …
Are you affected by CVE-2003-0791?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
