CVE-2005-1159

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-11605.1The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overridCVE-2005-11617.5Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameterCVE-2005-11625.8Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (CVE-2005-11636.4Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a pacCVE-2005-11645.0Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game header that providesCVE-2005-11655.0Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed data.CVE-2005-11662.1The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password inCVE-2005-11672.1Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users toCVE-2005-11685.0DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argCVE-2005-11697.5Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeCVE-2005-11707.5SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQL commands via the iCVE-2005-11714.3Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject arbitrary web script
CVE-2005-1159: High severity, CVSS 7.5 | Vulnix