Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-1159
HistoryMay 02, 2005 - 12:00 a.m.

CVE-2005-1159

2005-05-0200:00:00
ubuntu.com
ubuntu.com
12

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.6%

The native implementations of InstallTrigger and other functions in Firefox
before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the
types of objects being accessed, which causes the Javascript interpreter to
continue execution at the wrong memory address, which may allow attackers
to cause a denial of service (application crash) and possibly execute
arbitrary code by passing objects of the wrong type.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.06UNKNOWN
ubuntu6.10noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.7.04UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.6%