CVE-2005-2262: Mozilla Firefox

Medium severity, CVSS 5.1. EPSS: 6.5% chance of exploitation in the next 30 days.

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."

Affected products

• Mozilla Firefox: version 1.0.3 only; version 1.0.4 only

Published 2005-07-13. Last modified 2026-06-16.