--- title: "CVE-2005-1157\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2005-1157?format=md keywords: index, follow --- # CVE-2005-1157 Publication date 2 May 2005 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2." ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | mozilla | 7.10 gutsy | Not in release | | 7.04 feisty | Not in release | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Not affected | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1157) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2005-1157) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2005-1157) * [Debian](https://security-tracker.debian.org/tracker/CVE-2005-1157) ### Related Ubuntu Security Notices (USN) + [USN-124-1](https://usn.ubuntu.com/USN-124-1) + Mozilla and Firefox vulnerabilities + 11 May 2005 + [USN-149-3](https://usn.ubuntu.com/USN-149-3) + Ubuntu 4.10 update for Firefox vulnerabilities + 28 July 2005 ### Other references *