Description
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | devhelp +1 | 0.9.2-2.4.5 | RHSA-2005:435 |
| RHEL 4 | firefox | 1.0.4-1.4.1 | RHSA-2005:434 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Mozilla Firefox 1.0.3 - Install Method Arbitrary Code Execution EDB-986 · remote · May 7, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- RHSA-2005:434 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:435 Red Hat Security Advisory: mozilla security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- VU#534710 third-party-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=292691
- RHSA-2005:435 vendor-advisory
- 1013913 vdb-entry
- 15292 third-party-advisory
- 15495 vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=293302
- 20050508 Firefox Remote Compromise Technical Details mailing-list
- 13544 vdb-entry
- oval:org.mitre.oval:def:10045 vdb-entry signature
- http://greyhatsecurity.org/vulntests/ffrc.htm
- http://www.mozilla.org/security/announce/mfsa2005-42.html
- mozilla-javascript-code-execution(20443) vdb-entry
- oval:org.mitre.oval:def:100002 vdb-entry signature
- http://greyhatsecurity.org/firefox.htm
- RHSA-2005:434 vendor-advisory
- ADV-2005-0493 vdb-entry
- 20050508 Firefox Remote Compromise Leaked mailing-list