CVE-2005-1476

Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.

• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
• http://greyhatsecurity.org/firefox.htm
• http://greyhatsecurity.org/vulntests/ffrc.htmExploit
• http://marc.info/?l=full-disclosure&m=111553138007647&w=2
• http://marc.info/?l=full-disclosure&m=111556301530553&w=2
• http://secunia.com/advisories/15292Patch, Vendor Advisory
• http://securitytracker.com/id?1013913
• http://www.kb.cert.org/vuls/id/534710US Government Resource
• http://www.mozilla.org/security/announce/mfsa2005-42.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-434.html
• http://www.redhat.com/support/errata/RHSA-2005-435.html
• http://www.securityfocus.com/bid/13544
• http://www.securityfocus.com/bid/15495
• http://www.vupen.com/english/advisories/2005/0493
• https://bugzilla.mozilla.org/show_bug.cgi?id=292691
• https://bugzilla.mozilla.org/show_bug.cgi?id=293302
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20443
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100002
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
• http://greyhatsecurity.org/firefox.htm
• http://greyhatsecurity.org/vulntests/ffrc.htmExploit
• http://marc.info/?l=full-disclosure&m=111553138007647&w=2
• http://marc.info/?l=full-disclosure&m=111556301530553&w=2
• http://secunia.com/advisories/15292Patch, Vendor Advisory
• http://securitytracker.com/id?1013913
• http://www.kb.cert.org/vuls/id/534710US Government Resource
• http://www.mozilla.org/security/announce/mfsa2005-42.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-434.html
• http://www.redhat.com/support/errata/RHSA-2005-435.html
• http://www.securityfocus.com/bid/13544
• http://www.securityfocus.com/bid/15495
• http://www.vupen.com/english/advisories/2005/0493
• https://bugzilla.mozilla.org/show_bug.cgi?id=292691
• https://bugzilla.mozilla.org/show_bug.cgi?id=293302
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20443
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100002
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045

Published

May 9, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1470Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, …
• CVE-2005-1471Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, …
• CVE-2005-1472Certain system calls in Apple Mac OS X 10.4.1 do not properl…
• CVE-2005-1473SecurityAgent in Apple Mac OS X 10.4.1 allows attackers with…
• CVE-2005-1474Dashboard in Apple Mac OS X 10.4.1 allows remote attackers t…
• CVE-2005-1475The XMLHttpRequest object in Opera 8.0 Final Build 1095 allo…
• CVE-2005-1477The install function in Firefox 1.0.3 allows remote web site…
• CVE-2005-1478Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.…
• CVE-2005-1479SQL injection vulnerability in jgs_portal.php in JGS-Portal …
• CVE-2005-1480Directory traversal vulnerability in RaidenFTPD before 2.4.2…
• CVE-2005-1481Multiple SQL injection vulnerabilities in Aaron Outpost ASP …
• CVE-2005-1482ArticleLive 2005 allows remote attackers to gain privileges …