CVE-2005-1476: Mozilla Firefox

Medium severity, CVSS 5.1. EPSS: 16.7% chance of exploitation in the next 30 days.

Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.

Affected products

• Mozilla Firefox: up to and including 1.0.3

Published 2005-05-09. Last modified 2026-06-16.