CVE-2005-1157: Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace exist...

Security readout for executives and security teams

This 2005 browser flaw let a remote site replace an existing search plugin with a malicious one, potentially hiding the change from the user interface. Business risk is mainly legacy exposure: affected browsers are obsolete, but any remaining use could allow attacker-controlled script through normal browsing. Exposure is likely limited to systems still running the named legacy browsers or vendor-packaged equivalents from 2005. Modern environments are unlikely to be affected unless obsolete desktop images, kiosks, lab systems, or archived virtual machines retain these products. Low near-term priority for modern fleets, but moderate risk for legacy systems still used to browse external content. Treat this as a legacy asset hygiene issue: find and remove obsolete browsers rather than building new compensating controls around them. Mitigation focus: Upgrade Firefox to 1.0.3 or later where Firefox remains present.; Upgrade Mozilla Suite to 1.7.7 or later where Mozilla Suite remains present.; Retire or isolate Netscape 7.2 pending verified vendor guidance..

Prepared

Jun 29, 2026, 22:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.