CVE-2005-0989
NoneCVSS
—
EPSS
10.0%
Published
May 2, 2005
CISA due date
—
The record
The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.1 | mozilla-thunderbird | 0 | 1.0.2-2.sarge1.0.6 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.0.3-1.4.1 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.0.3-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird | 0 | 0:1.0.6-1.4.1 |
| Red Hat:enterprise_linux:4::as | thunderbird-debuginfo | 0 | 0:1.0.6-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.0.3-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.0.3-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird | 0 | 0:1.0.6-1.4.1 |
| Red Hat:enterprise_linux:4::desktop | thunderbird-debuginfo | 0 | 0:1.0.6-1.4.1 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.0.3-1.4.1 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.0.3-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird | 0 | 0:1.0.6-1.4.1 |
| Red Hat:enterprise_linux:4::es | thunderbird-debuginfo | 0 | 0:1.0.6-1.4.1 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.9.2-2.4.4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.0.3-1.4.1 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.0.3-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird | 0 | 0:1.0.6-1.4.1 |
| Red Hat:enterprise_linux:4::ws | thunderbird-debuginfo | 0 | 0:1.0.6-1.4.1 |
Related vulnerabilities
- CVE-2006-1730 Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before… Also affects mozilla-thunderbird
- CVE-2006-0749 nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before… Also affects mozilla-thunderbird
- CVE-2005-4134 Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote… Also affects mozilla-thunderbird
- CVE-2005-2968 Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell… Also affects mozilla-thunderbird
- CVE-2005-2871 Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6… Also affects mozilla-thunderbird
- CVE-2005-2265 Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote… Also affects mozilla-thunderbird
- CVE-2008-0016 Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before… Also affects devhelp
- CVE-2007-1562 The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3… Also affects devhelp