CVE-2005-0399
NoneCVSS
—
EPSS
15.1%
Published
May 2, 2005
CISA due date
—
The record
Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::as | evolution | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::as | evolution-debuginfo | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::as | evolution-devel | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::desktop | evolution | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::desktop | evolution-debuginfo | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::desktop | evolution-devel | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::es | evolution | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::es | evolution-debuginfo | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::es | evolution-devel | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.9.2-2.4.3 |
| Red Hat:enterprise_linux:4::ws | evolution | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::ws | evolution-debuginfo | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::ws | evolution-devel | 0 | 0:2.0.2-14 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.0.2-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.0.2-1.4.1 |
Related vulnerabilities
- CVE-2008-0016 Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before… Also affects devhelp
- CVE-2007-1562 The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3… Also affects devhelp
- CVE-2007-0009 Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services… Also affects devhelp
- CVE-2007-0981 Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and… Also affects devhelp
- CVE-2006-4253 Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers… Also affects devhelp
- CVE-2006-3677 Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to… Also affects devhelp
- CVE-2006-1730 Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before… Also affects devhelp
- CVE-2006-0749 nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before… Also affects devhelp