Description
The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | mozilla-thunderbird | 1.0.2-2.sarge1.0.6 | DSA-781-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | devhelp +1 | 0.9.2-2.4.4 | RHSA-2005:386 |
| RHEL 4 | firefox | 1.0.3-1.4.1 | RHSA-2005:383 |
| RHEL 4 | thunderbird | 1.0.6-1.4.1 | RHSA-2005:601 |
Advisories 4
- RHSA-2005:601 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:386 Red Hat Security Advisory: Mozilla security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:383 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-781-1 mozilla-thunderbird - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- RHSA-2005:386 vendor-advisory
- 14992 third-party-advisory
- mozilla-installtrigger-command-execution(20123) vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=290162
- 19823 third-party-advisory
- 1013742 vdb-entry
- 15495 vdb-entry
- RHSA-2005:601 vendor-advisory
- GLSA-200504-18 vendor-advisory
- http://www.mozilla.org/security/announce/mfsa2005-40.html
- 13232 vdb-entry
- 1013743 vdb-entry
- 14938 third-party-advisory
- oval:org.mitre.oval:def:100018 vdb-entry signature
- RHSA-2005:384 vendor-advisory
- RHSA-2005:383 vendor-advisory
- SUSE-SA:2006:022 vendor-advisory
- oval:org.mitre.oval:def:10629 vdb-entry signature