CVE-2005-1157

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-02 · updated 2026-06-16

Description

Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."

Affected products

Mozilla Firefox: 0.8, 0.9, 0.9-rc, 0.9.1, 0.9.2, 0.9.3 (+5)
Mozilla: 1.3, 1.4, 1.4-alpha, 1.4.1, 1.5, 1.5-alpha (+17)
Netscape Navigator: 7.2

References

http://secunia.com/advisories/14938
http://secunia.com/advisories/14992
http://secunia.com/advisories/14996
http://www.mikx.de/firesearching/
http://www.mozilla.org/security/announce/mfsa2005-38.html
http://www.redhat.com/support/errata/RHSA-2005-383.html
http://www.redhat.com/support/errata/RHSA-2005-384.html
http://www.redhat.com/support/errata/RHSA-2005-386.html
http://www.securityfocus.com/bid/13211
http://www.securityfocus.com/bid/15495
https://bugzilla.mozilla.org/show_bug.cgi?id=290037

Get alerted when CVE-2005-1157 or the next vulnerability affects your stack