Title: Multiple Browser InstallTrigger.install() IconURL Parameter Arbitrary Script Execution

Unknown or Incomplete

Unknown or Incomplete

Unknown or Incomplete

• Security Tracker: 1013913
• SCIP VulDB ID: 1464
• Secunia Advisory ID: 15292 15437 15461 15464 15528 15643 15909 17645
• CVE ID: 2005-1476 (see also: NVD)
• Vendor Specific Advisory URL: ftp://ftp.sco.com/pub/openserver5/507/mp/osr507mp4/osr507mp4.htm ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.446088
  http://www.gentoo.org/security/en/glsa/glsa-200505-11.xml
  http://www.mozilla.org/security/announce/mfsa2005-42.html
• Other Advisory URL: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.29/SCOSA-2005.29.txt http://rhn.redhat.com/errata/RHSA-2005-434.html
  http://rhn.redhat.com/errata/RHSA-2005-435.html
  http://www.ubuntulinux.org/support/documentation/usn/usn-134-1
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-05/0087.html
  http://archives.neohapsis.com/archives/bugtraq/2005-05/0101.html
  http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0127.html
• Generic Informational URL: http://www.techworld.com/security/news/index.cfm?NewsID=3619
• Vendor Specific News/Changelog Entry: https://bugzilla.mozilla.org/show_bug.cgi?id=293302
• Keyword: SCOSA-2005.49

Unknown or Incomplete