Lucene search
Mozilla FoundationMFSA2005-30HistoryMar 22, 2005 - 12:00 a.m.
GIF heap overflow parsing Netscape extension 2 — Mozilla
2005-03-2200:00:00
Mozilla Foundation
www.mozilla.org
11
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.941 High
EPSS
Percentile
99.1%
An GIF processing error when parsing the obsolete Netscape extension 2 can lead to an exploitable heap overrun, allowing an attacker to run arbitrary code on the user’s machine.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 1.0.2 | |
| mozilla suite | lt | 1.7.6 | |
| thunderbird | lt | 1.0.2 |
Related
saint
saint
Mozilla Firefox GIF processing buffer overflow
2006-06-09 00:00:00
Mozilla Firefox GIF processing buffer overflow
2006-06-09 00:00:00
Mozilla Firefox GIF processing buffer overflow
2006-06-09 00:00:00
nessus
nessus
FreeBSD : mozilla -- heap buffer overflow in GIF image processing (7d2aac52-9c6b-11d9-99a7-000a95bc6fae)
2005-07-13 00:00:00
Mozilla Thunderbird < 1.0.2 Browser GIF Processing Overflow
2005-03-23 00:00:00
Fedora Core 3 : thunderbird-1.0.2-1.3.1 (2005-247)
2005-09-12 00:00:00
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200503-31 (Firefox)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2005-0399
2005-05-02 00:00:00
cert
cert
Mozilla products vulnerable to heap overflow via specially crafted GIF file
2005-03-30 00:00:00
cve
cve
CVE-2005-0399
2005-05-02 04:00:00
checkpoint_advisories
checkpoint_advisories
freebsd
freebsd
mozilla -- heap buffer overflow in GIF image processing
2005-03-10 00:00:00
redhat
redhat
(RHSA-2005:337) thunderbird security update
2005-03-23 00:00:00
(RHSA-2005:336) firefox security update
2005-03-23 00:00:00
(RHSA-2005:323) mozilla security update
2005-03-23 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2005-03-25 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2005-03-25 00:00:00
Mozilla Suite: Multiple vulnerabilities
2005-03-25 00:00:00
suse
suse
remote code execution in MozillaThunderbird
2006-04-25 13:15:04
remote code execution in phpMyAdmin
2006-01-26 13:53:52
ubuntu
ubuntu
Ubuntu 4.10 update for Firefox vulnerabilities
2005-07-28 00:00:00
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.941 High
EPSS
Percentile
99.1%
Related for MFSA2005-30