5.1

CVE-2005-0399

EPSS 41.28%
Veröffentlicht 02.05.2005 04:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 23

NVD 46 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version0.8

Mozilla ≫ Firefox Version0.9

Mozilla ≫ Firefox Version0.9 Updaterc

Mozilla ≫ Firefox Version0.9.1

Mozilla ≫ Firefox Version0.9.2

Mozilla ≫ Firefox Version0.9.3

Mozilla ≫ Firefox Version0.10

Mozilla ≫ Firefox Version0.10.1

Mozilla ≫ Firefox Version1.0

Mozilla ≫ Firefox Version1.0.1

Mozilla ≫ Mozilla Version1.3

Mozilla ≫ Mozilla Version1.4

Mozilla ≫ Mozilla Version1.4 Updatealpha

Mozilla ≫ Mozilla Version1.4.1

Mozilla ≫ Mozilla Version1.5

Mozilla ≫ Mozilla Version1.5 Updatealpha

Mozilla ≫ Mozilla Version1.5 Updaterc1

Mozilla ≫ Mozilla Version1.5 Updaterc2

Mozilla ≫ Mozilla Version1.5.1

Mozilla ≫ Mozilla Version1.6

Mozilla ≫ Mozilla Version1.6 Updatealpha

Mozilla ≫ Mozilla Version1.6 Updatebeta

Mozilla ≫ Mozilla Version1.7

Mozilla ≫ Mozilla Version1.7 Updatealpha

Mozilla ≫ Mozilla Version1.7 Updatebeta

Mozilla ≫ Mozilla Version1.7 Updaterc1

Mozilla ≫ Mozilla Version1.7 Updaterc2

Mozilla ≫ Mozilla Version1.7 Updaterc3

Mozilla ≫ Mozilla Version1.7.1

Mozilla ≫ Mozilla Version1.7.2

Mozilla ≫ Mozilla Version1.7.3

Mozilla ≫ Mozilla Version1.7.5

Mozilla ≫ Thunderbird Version0.1

Mozilla ≫ Thunderbird Version0.2

Mozilla ≫ Thunderbird Version0.3

Mozilla ≫ Thunderbird Version0.4

Mozilla ≫ Thunderbird Version0.5

Mozilla ≫ Thunderbird Version0.6

Mozilla ≫ Thunderbird Version0.7

Mozilla ≫ Thunderbird Version0.7.1

Mozilla ≫ Thunderbird Version0.7.2

Mozilla ≫ Thunderbird Version0.7.3

Mozilla ≫ Thunderbird Version0.8

Mozilla ≫ Thunderbird Version0.9

Mozilla ≫ Thunderbird Version1.0

Mozilla ≫ Thunderbird Version1.0.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	41.28%	0.971

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt

http://www.securityfocus.com/bid/15495

http://www.redhat.com/support/errata/RHSA-2005-323.html

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-335.html

Vendor Advisory

http://secunia.com/advisories/19823

http://www.novell.com/linux/security/advisories/2006_04_25.html

http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-337.html

Vendor Advisory

http://secunia.com/advisories/14654

Patch

Vendor Advisory

http://www.ciac.org/ciac/bulletins/p-160.shtml

http://www.kb.cert.org/vuls/id/557948

Third Party Advisory

US Government Resource

http://www.mozilla.org/security/announce/mfsa2005-30.html

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-336.html

Vendor Advisory

http://www.securityfocus.com/bid/12881

http://www.vupen.com/english/advisories/2005/0296

http://xforce.iss.net/xforce/alerts/id/191

Vendor Advisory

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19269

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377

https://nvd.nist.gov/vuln/detail/CVE-2005-0399

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0399

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0399

EUVD