mozilla -- BMP decoder vulnerabilities

2004-09-1300:00:00

vuxml.freebsd.org

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.117 Low

EPSS

Percentile

95.3%

JSON

Gael Delalleau discovered several integer overflows in
Mozilla’s BMP decoder that can result in denial-of-service or
arbitrary code execution.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchthunderbird< 0.7.3_1UNKNOWN
FreeBSDanynoarchde-linux-mozillafirebird< 0.9.3_1UNKNOWN
FreeBSDanynoarchel-linux-mozillafirebird< 0.9.3_1UNKNOWN
FreeBSDanynoarchfirefox< 0.9.3_1UNKNOWN
FreeBSDanynoarchja-linux-mozillafirebird-gtk1< 0.9.3_1UNKNOWN
FreeBSDanynoarchja-mozillafirebird-gtk2< 0.9.3_1UNKNOWN
FreeBSDanynoarchlinux-mozillafirebird< 0.9.3_1UNKNOWN
FreeBSDanynoarchlinux-phoenix< 0.9.3_1UNKNOWN
FreeBSDanynoarchphoenix< 0.9.3_1UNKNOWN
FreeBSDanynoarchru-linux-mozillafirebird< 0.9.3_1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	thunderbird	< 0.7.3_1	UNKNOWN
FreeBSD	any	noarch	de-linux-mozillafirebird	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	el-linux-mozillafirebird	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	firefox	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	ja-linux-mozillafirebird-gtk1	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	ja-mozillafirebird-gtk2	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	linux-mozillafirebird	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	linux-phoenix	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	phoenix	< 0.9.3_1	UNKNOWN
FreeBSD	any	noarch	ru-linux-mozillafirebird	< 0.9.3_1	UNKNOWN