mozilla security update

2005-09-1123:22:26

CentOS Project

lists.centos.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.964 High

EPSS

Percentile

99.6%

JSON

CentOS Errata and Security Advisory CESA-2005:769-01

Mozilla is an open source Web browser, advanced email and newsgroup client,
IRC chat client, and HTML editor.

A bug was found in the way Mozilla processes certain international domain
names. An attacker could create a specially crafted HTML file, which when
viewed by the victim would cause Mozilla to crash or possibly execute
arbitrary code. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-2871 to this issue.

Users of Mozilla are advised to upgrade to this updated package that
contains a backported patch and is not vulnerable to this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-September/074319.html

Affected packages:
mozilla
mozilla-chat
mozilla-devel
mozilla-dom-inspector
mozilla-js-debugger
mozilla-mail
mozilla-nspr
mozilla-nspr-devel
mozilla-nss
mozilla-nss-devel

OSVersionArchitecturePackageVersionFilename
CentOS2i386mozilla< 1.7.10-1.1.2.2mozilla-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-chat< 1.7.10-1.1.2.2mozilla-chat-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-devel< 1.7.10-1.1.2.2mozilla-devel-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-dom-inspector< 1.7.10-1.1.2.2mozilla-dom-inspector-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-js-debugger< 1.7.10-1.1.2.2mozilla-js-debugger-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-mail< 1.7.10-1.1.2.2mozilla-mail-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-nspr< 1.7.10-1.1.2.2mozilla-nspr-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-nspr-devel< 1.7.10-1.1.2.2mozilla-nspr-devel-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-nss< 1.7.10-1.1.2.2mozilla-nss-1.7.10-1.1.2.2.i386.rpm
CentOS2i386mozilla-nss-devel< 1.7.10-1.1.2.2mozilla-nss-devel-1.7.10-1.1.2.2.i386.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	2	i386	mozilla	< 1.7.10-1.1.2.2	mozilla-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-chat	< 1.7.10-1.1.2.2	mozilla-chat-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-devel	< 1.7.10-1.1.2.2	mozilla-devel-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-dom-inspector	< 1.7.10-1.1.2.2	mozilla-dom-inspector-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-js-debugger	< 1.7.10-1.1.2.2	mozilla-js-debugger-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-mail	< 1.7.10-1.1.2.2	mozilla-mail-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-nspr	< 1.7.10-1.1.2.2	mozilla-nspr-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-nspr-devel	< 1.7.10-1.1.2.2	mozilla-nspr-devel-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-nss	< 1.7.10-1.1.2.2	mozilla-nss-1.7.10-1.1.2.2.i386.rpm
CentOS	2	i386	mozilla-nss-devel	< 1.7.10-1.1.2.2	mozilla-nss-devel-1.7.10-1.1.2.2.i386.rpm