CVE:CVE-2005-1158
CNNVD:CNNVD-200505-062
Firefox 1.0.3之前版本中存在多个"缺失的安全检查"，允许远程攻击者使用Firefox工具条的_search target将任意Javascript注入需要权限的页面。
solution:Upgrade mozilla firefox to a higher version than 0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,1.0,1.0.1,1.0.2,and avoid the version 0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,1.0,1.0.1,1.0.2