Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox安装方式远程执行任意代码漏洞
Vulnerability Description
Mozilla Firefox是一款非常流行的开放源码WEB浏览器。 Mozilla Firefox在安装方式的实现上存在漏洞，可能导致无需用户交互就可执行任意代码。 对漏洞的最初分析表明该漏洞可能导致迷惑浏览器状态栏信息，并允许任意脚本获得UniversalXPConnect权限。但据观察这个漏洞还可被远程利用，在有漏洞的计算机上以运行受影响浏览器用户的权限执行特权操作。
CVSS Information
N/A
Vulnerability Type
N/A