5

CVE-2005-4134

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup.  NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox.  Also, it has been independently reported that Netscape 8.1 does not have this issue.

Data is provided by the National Vulnerability Database (NVD)
K-meleon Project ≫ K-meleon Version <= 0.9
K-meleon Project ≫ K-meleon Version0.7
K-meleon Project ≫ K-meleon Version0.7_service_pack_1
K-meleon Project ≫ K-meleon Version0.8
K-meleon Project ≫ K-meleon Version0.8.1
K-meleon Project ≫ K-meleon Version0.8.2
Mozilla ≫ Firefox Version <= 1.5
Mozilla ≫ Mozilla Suite Version <= 1.7.12
Netscape ≫ Navigator Version <= 8.0.40
Netscape ≫ Navigator Version7.1
Netscape ≫ Navigator Version7.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 29.39% 0.964
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P