5.1

CVE-2005-0399

EPSS 41.28%
Veröffentlicht 02.05.2005 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 23

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version0.8

Mozilla ≫ Firefox Version0.9

Mozilla ≫ Firefox Version0.9 Updaterc

Mozilla ≫ Firefox Version0.9.1

Mozilla ≫ Firefox Version0.9.2

Mozilla ≫ Firefox Version0.9.3

Mozilla ≫ Firefox Version0.10

Mozilla ≫ Firefox Version0.10.1

Mozilla ≫ Firefox Version1.0

Mozilla ≫ Firefox Version1.0.1

Mozilla ≫ Mozilla Version1.3

Mozilla ≫ Mozilla Version1.4

Mozilla ≫ Mozilla Version1.4 Updatealpha

Mozilla ≫ Mozilla Version1.4.1

Mozilla ≫ Mozilla Version1.5

Mozilla ≫ Mozilla Version1.5 Updatealpha

Mozilla ≫ Mozilla Version1.5 Updaterc1

Mozilla ≫ Mozilla Version1.5 Updaterc2

Mozilla ≫ Mozilla Version1.5.1

Mozilla ≫ Mozilla Version1.6

Mozilla ≫ Mozilla Version1.6 Updatealpha

Mozilla ≫ Mozilla Version1.6 Updatebeta

Mozilla ≫ Mozilla Version1.7

Mozilla ≫ Mozilla Version1.7 Updatealpha

Mozilla ≫ Mozilla Version1.7 Updatebeta

Mozilla ≫ Mozilla Version1.7 Updaterc1

Mozilla ≫ Mozilla Version1.7 Updaterc2

Mozilla ≫ Mozilla Version1.7 Updaterc3

Mozilla ≫ Mozilla Version1.7.1

Mozilla ≫ Mozilla Version1.7.2

Mozilla ≫ Mozilla Version1.7.3

Mozilla ≫ Mozilla Version1.7.5

Mozilla ≫ Thunderbird Version0.1

Mozilla ≫ Thunderbird Version0.2

Mozilla ≫ Thunderbird Version0.3

Mozilla ≫ Thunderbird Version0.4

Mozilla ≫ Thunderbird Version0.5

Mozilla ≫ Thunderbird Version0.6

Mozilla ≫ Thunderbird Version0.7

Mozilla ≫ Thunderbird Version0.7.1

Mozilla ≫ Thunderbird Version0.7.2

Mozilla ≫ Thunderbird Version0.7.3

Mozilla ≫ Thunderbird Version0.8

Mozilla ≫ Thunderbird Version0.9

Mozilla ≫ Thunderbird Version1.0

Mozilla ≫ Thunderbird Version1.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	41.28%	0.971

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt

http://www.securityfocus.com/bid/15495

http://www.redhat.com/support/errata/RHSA-2005-323.html

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-335.html

Vendor Advisory

http://secunia.com/advisories/19823

http://www.novell.com/linux/security/advisories/2006_04_25.html

http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-337.html

Vendor Advisory

http://secunia.com/advisories/14654

Patch

Vendor Advisory

http://www.ciac.org/ciac/bulletins/p-160.shtml

http://www.kb.cert.org/vuls/id/557948

Third Party Advisory

US Government Resource

http://www.mozilla.org/security/announce/mfsa2005-30.html

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-336.html

Vendor Advisory

http://www.securityfocus.com/bid/12881

http://www.vupen.com/english/advisories/2005/0296

http://xforce.iss.net/xforce/alerts/id/191

Vendor Advisory

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19269

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377

https://nvd.nist.gov/vuln/detail/CVE-2005-0399

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0399

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0399

EUVD