cve/2005/CVE-2005-2270.md

CVE-2005-2270

Description

Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.

POC

Reference

• http://www.redhat.com/support/errata/RHSA-2005-601.html
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A550

Github

No PoCs found on GitHub currently.