CVE ID:	CVE-2005-1157
Description:	Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1157 13211 http://www.securityfocus.com/bid/13211 14938 http://secunia.com/advisories/14938 14992 http://secunia.com/advisories/14992 14996 http://secunia.com/advisories/14996 15495 http://www.securityfocus.com/bid/15495 RHSA-2005:383 http://www.redhat.com/support/errata/RHSA-2005-383.html RHSA-2005:384 http://www.redhat.com/support/errata/RHSA-2005-384.html RHSA-2005:386 http://www.redhat.com/support/errata/RHSA-2005-386.html SCOSA-2005.49 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt http://www.mikx.de/firesearching/ http://www.mikx.de/firesearching/ http://www.mozilla.org/security/announce/mfsa2005-38.html http://www.mozilla.org/security/announce/mfsa2005-38.html https://bugzilla.mozilla.org/show_bug.cgi?id=290037 https://bugzilla.mozilla.org/show_bug.cgi?id=290037 mozilla-plugin-xss(20125) https://exchange.xforce.ibmcloud.com/vulnerabilities/20125 oval:org.mitre.oval:def:9961 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9961