Published: 02/05/2005 Updated: 03/05/2018

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in GIF2.cpp in Firefox prior to 1.0.2, Mozilla before to 1.7.6, and Thunderbird prior to 1.0.2, and possibly other applications that use the same library, allows remote malicious users to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.9.2
mozilla firefox 0.9.3
mozilla mozilla 1.4
mozilla mozilla 1.5
mozilla mozilla 1.5.1
mozilla mozilla 1.7
mozilla mozilla 1.7.1
mozilla thunderbird 0.7.1
mozilla thunderbird 0.7.2
mozilla firefox 0.10.1
mozilla firefox 0.8
mozilla firefox 1.0.1
mozilla mozilla 1.3
mozilla mozilla 1.6
mozilla mozilla 1.7.5
mozilla thunderbird 0.3
mozilla thunderbird 0.4
mozilla thunderbird 0.9
mozilla thunderbird 1.0
mozilla firefox 0.10
mozilla firefox 0.9
mozilla firefox 1.0
mozilla mozilla 1.7.2
mozilla mozilla 1.7.3
mozilla thunderbird 0.1
mozilla thunderbird 0.2
mozilla thunderbird 0.7.3
mozilla thunderbird 0.8
mozilla firefox 0.9.1
mozilla mozilla 1.4.1
mozilla thunderbird 0.5
mozilla thunderbird 0.6
mozilla thunderbird 0.7
mozilla thunderbird 1.0.1

USN-149-1 fixed some vulnerabilities in the Ubuntu 504 (Hoary Hedgehog) version of Firefox The version shipped with Ubuntu 410 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well Please see ...

Synopsis mozilla security update Type/Severity Security Advisory: Critical Topic Updated mozilla packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla is an open source Web bro ...

Synopsis firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla Firefox is an open source ...

Synopsis mozilla security update Type/Severity Security Advisory: Critical Topic Updated mozilla packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla is an open source Web bro ...

Synopsis thunderbird security update Type/Severity Security Advisory: Critical Topic Updated thunderbird packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla Thunderbird is a ...

NVD-CWE-Other http://xforce.iss.net/xforce/alerts/id/191 http://www.mozilla.org/security/announce/mfsa2005-30.html https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877 http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://www.redhat.com/support/errata/RHSA-2005-323.html http://www.redhat.com/support/errata/RHSA-2005-335.html http://www.redhat.com/support/errata/RHSA-2005-336.html http://www.redhat.com/support/errata/RHSA-2005-337.html http://www.kb.cert.org/vuls/id/557948 http://www.ciac.org/ciac/bulletins/p-160.shtml http://secunia.com/advisories/14654 http://www.securityfocus.com/bid/12881 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt http://www.securityfocus.com/bid/15495 http://secunia.com/advisories/19823 http://www.novell.com/linux/security/advisories/2006_04_25.html http://www.vupen.com/english/advisories/2005/0296 https://exchange.xforce.ibmcloud.com/vulnerabilities/19269 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028 https://nvd.nist.gov https://usn.ubuntu.com/149-3/https://www.kb.cert.org/vuls/id/557948

CVE-2005-0399

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect