CVE-2005-1156: Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbit...

Security readout for executives and security teams

This is a legacy browser flaw: vulnerable Mozilla-family browsers could let a malicious site abuse search-plugin installation behavior to run script or code. It matters only where Firefox before 1.0.3, Mozilla Suite before 1.7.7, or Netscape 7.2 still exists. Exposure is limited to obsolete desktop environments running the named browser versions, including packaged builds covered by historical Red Hat, Gentoo, SCO, and OVAL references. Modern supported browsers are not identified as affected in the supplied bundle. Low likelihood for most modern environments, but high impact if found. Prioritize confirmation through asset inventory and remove any affected browser immediately, especially on systems handling sensitive data. Mitigation focus: Upgrade Firefox to 1.0.3 or later if still present.; Upgrade Mozilla Suite to 1.7.7 or later if still present.; Remove Netscape 7.2 from managed endpoints..

Prepared

Jun 29, 2026, 22:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.