mozilla -- multiple heap buffer overflows

2004-09-1300:00:00

vuxml.freebsd.org

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.56 Medium

EPSS

Percentile

97.6%

JSON

Several heap buffer overflows were discovered and fixed in the
most recent versions of Mozilla, Firefox, and Thunderbird.
These overflows may occur when:

Using the “Send Page” function.
Checking mail on a malicious POP3 server.
Processing non-ASCII URLs.

Each of these vulnerabilities may be exploited for remote
code execution.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchthunderbird< 0.7.3_1UNKNOWN
FreeBSDanynoarchfirefox< 0.9.3_1UNKNOWN
FreeBSDanynoarchmozilla< 1.7.2_2,2UNKNOWN
FreeBSDanynoarchmozilla-gtk1< 1.7.2_3UNKNOWN
FreeBSDanynoarchlinux-mozilla< 1.7.3UNKNOWN
FreeBSDanynoarchlinux-mozillafirebird= 0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	thunderbird	< 0.7.3_1	UNKNOWN
FreeBSD	any	noarch	firefox	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	mozilla	< 1.7.2_2,2	UNKNOWN
FreeBSD	any	noarch	mozilla-gtk1	< 1.7.2_3	UNKNOWN
FreeBSD	any	noarch	linux-mozilla	< 1.7.3	UNKNOWN
FreeBSD	any	noarch	linux-mozillafirebird	= 0	UNKNOWN