CVE-2003-0791
CriticalSummary
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
Risk Assessment
Attackers can exploit this vulnerability to execute unauthorized code, potentially leading to serious security breaches in applications utilizing this functionality.
Recommendation
It is recommended to upgrade to a newer version of Mozilla to eliminate this vulnerability and to review and restrict the use of deserialization functions in applications.
Original NVD description (English source)
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.