CVE-2005-0399

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

firefox

mozilla

thunderbird

gif

buffer overflow

security vulnerability

cve-2005-0399

7.7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.941 High

EPSS

Percentile

99.1%

JSON

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

CPENameOperatorVersion
mozilla:thunderbirdmozilla thunderbirdeq0.6
mozilla:firefoxmozilla firefoxeq0.8
mozilla:thunderbirdmozilla thunderbirdeq0.7.2
mozilla:thunderbirdmozilla thunderbirdeq0.3
mozilla:mozillamozillaeq1.7
mozilla:thunderbirdmozilla thunderbirdeq0.2
mozilla:mozillamozillaeq1.5
mozilla:firefoxmozilla firefoxeq0.9.1
mozilla:mozillamozillaeq1.7.5
mozilla:firefoxmozilla firefoxeq0.10.1

CPE	Name	Operator	Version
mozilla:thunderbird	mozilla thunderbird	eq	0.6
mozilla:firefox	mozilla firefox	eq	0.8
mozilla:thunderbird	mozilla thunderbird	eq	0.7.2
mozilla:thunderbird	mozilla thunderbird	eq	0.3
mozilla:mozilla	mozilla	eq	1.7
mozilla:thunderbird	mozilla thunderbird	eq	0.2
mozilla:mozilla	mozilla	eq	1.5
mozilla:firefox	mozilla firefox	eq	0.9.1
mozilla:mozilla	mozilla	eq	1.7.5
mozilla:firefox	mozilla firefox	eq	0.10.1