CVE-2005-2705

2005-09-2319:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2705

integer overflow

javascript engine

firefox

mozilla suite

remote code execution

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.948 High

EPSS

Percentile

99.3%

JSON

Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code.

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxeq1.0.2
mozilla:firefoxmozilla firefoxle1.0.6
mozilla:mozilla_suitemozilla mozilla suitele1.7.11
mozilla:mozilla_suitemozilla mozilla suiteeq1.7.10
mozilla:firefoxmozilla firefoxeq1.0.4
mozilla:mozilla_suitemozilla mozilla suiteeq1.7.8
mozilla:firefoxmozilla firefoxeq1.0
mozilla:firefoxmozilla firefoxeq1.0.1
mozilla:firefoxmozilla firefoxeq1.0.3
mozilla:mozilla_suitemozilla mozilla suiteeq1.7.7

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	eq	1.0.2
mozilla:firefox	mozilla firefox	le	1.0.6
mozilla:mozilla_suite	mozilla mozilla suite	le	1.7.11
mozilla:mozilla_suite	mozilla mozilla suite	eq	1.7.10
mozilla:firefox	mozilla firefox	eq	1.0.4
mozilla:mozilla_suite	mozilla mozilla suite	eq	1.7.8
mozilla:firefox	mozilla firefox	eq	1.0
mozilla:firefox	mozilla firefox	eq	1.0.1
mozilla:firefox	mozilla firefox	eq	1.0.3
mozilla:mozilla_suite	mozilla mozilla suite	eq	1.7.7