CVE-2005-0399

2005-05-0200:00:00

ubuntu.com

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.941 High

EPSS

Percentile

99.1%

JSON

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla
before to 1.7.6, and Thunderbird before 1.0.2, and possibly other
applications that use the same library, allows remote attackers to execute
arbitrary code via a GIF image with a crafted Netscape extension 2 block
and buffer size.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1UNKNOWN
ubuntu6.10noarchfirefox< 2.0.0.6+0dfsg-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchfirefox< 2.0.0.6+1-0ubuntu1UNKNOWN
ubuntu7.10noarchfirefox< 2.0.0.6+1-0ubuntu1UNKNOWN
ubuntu7.10noarchfirefox-3.0< 3.0~alpha7-0ubuntu6UNKNOWN
ubuntu7.10noarchlightning-sunbird< 0.5-0ubuntu4UNKNOWN
ubuntu7.10noarchmidbrowser< 0.1.6b-0ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1	UNKNOWN
ubuntu	6.10	noarch	firefox	< 2.0.0.6+0dfsg-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	firefox	< 2.0.0.6+1-0ubuntu1	UNKNOWN
ubuntu	7.10	noarch	firefox	< 2.0.0.6+1-0ubuntu1	UNKNOWN
ubuntu	7.10	noarch	firefox-3.0	< 3.0~alpha7-0ubuntu6	UNKNOWN
ubuntu	7.10	noarch	lightning-sunbird	< 0.5-0ubuntu4	UNKNOWN
ubuntu	7.10	noarch	midbrowser	< 0.1.6b-0ubuntu2	UNKNOWN