CVE-2005-2265

2005-07-1300:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.967 High

EPSS

Percentile

99.6%

JSON

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2
allows remote attackers to cause a denial of service (access violation and
crash), and possibly execute arbitrary code, by calling
InstallVersion.compareTo with an object instead of a string.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmozilla< 1.7.12-1.1ubuntu2UNKNOWN
ubuntu6.10noarchmozilla< 1.7.12-1.1ubuntu2UNKNOWN
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.06UNKNOWN
ubuntu6.10noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.7.04UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	mozilla	< 1.7.12-1.1ubuntu2	UNKNOWN
ubuntu	6.10	noarch	mozilla	< 1.7.12-1.1ubuntu2	UNKNOWN
ubuntu	6.06	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.6.06	UNKNOWN
ubuntu	6.10	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	mozilla-thunderbird	< 1.5.0.13-0ubuntu0.7.04	UNKNOWN