Lucene search

K
cve[email protected]CVE-2005-2414
HistoryAug 03, 2005 - 4:00 a.m.

CVE-2005-2414

2005-08-0304:00:00
web.nvd.nist.gov
25
cve-2005-2414
xpcom library
web browsers
firefox
mozilla
netscape
galeon
denial of service
application crash
dom
nested div tags
nvd

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.057 Low

EPSS

Percentile

93.4%

Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service (application crash) via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering page and referenced objects to be deleted.

Affected configurations

NVD
Node
xpcomxpcom
CPENameOperatorVersion
xpcom:xpcomxpcomeq*

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.057 Low

EPSS

Percentile

93.4%