PT-2005-3194 · Mozilla+2 · Mozilla Firefox+3

John Dalbec

·

Publicado

2005-07-13

·

Atualizado

2017-10-11

·

CVE-2005-2265

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 1.0.5 Mozilla versions prior to 1.7.9 Netscape versions 7.2 and 8.0.2
Description: The issue allows remote attackers to cause a denial of service, resulting in an access violation and crash, and possibly execute arbitrary code. This is achieved by calling InstallVersion.compareTo with an object instead of a string.
Recommendations: For Firefox versions prior to 1.0.5, update to version 1.0.5 or later. For Mozilla versions prior to 1.7.9, update to version 1.7.9 or later. For Netscape versions 7.2 and 8.0.2, consider disabling the InstallVersion.compareTo function as a temporary workaround until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-2265
DSA-779-1
DSA-779-2
DSA-781-1
DSA-810-1
DTSA-14-1
DTSA-8-2
RHSA-2005:586
RHSA-2005:587
RHSA-2005:601
RHSA-2005_586
RHSA-2005_587
RHSA-2005_601

Produtos afetados

Firefox
Mozilla Firefox
Netscape
Red Hat