CVE ID:	CAN-2005-1532
Description:	Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
Test IDs:	1.3.6.1.4.1.25623.1.0.55162
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1532 1013964 http://securitytracker.com/id?1013964 1013965 http://securitytracker.com/id?1013965 13645 http://www.securityfocus.com/bid/13645 15495 http://www.securityfocus.com/bid/15495 19823 http://secunia.com/advisories/19823 ADV-2005-0530 http://www.vupen.com/english/advisories/2005/0530 RHSA-2005:434 http://www.redhat.com/support/errata/RHSA-2005-434.html RHSA-2005:435 http://www.redhat.com/support/errata/RHSA-2005-435.html RHSA-2005:601 http://www.redhat.com/support/errata/RHSA-2005-601.html SCOSA-2005.49 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt SUSE-SA:2006:022 http://www.novell.com/linux/security/advisories/2006_04_25.html http://www.mozilla.org/security/announce/mfsa2005-44.html http://www.mozilla.org/security/announce/mfsa2005-44.html oval:org.mitre.oval:def:100014 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100014 oval:org.mitre.oval:def:10791 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10791