PT-2005-3587 · Mozilla+1 · Firefox+2

Mats Palmgren · Publicado 2005-09-22 · Atualizado 2017-10-11 · CVE-2005-2702

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 1.0.7 Mozilla Suite versions prior to 1.7.12

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.

Recommendations For Firefox versions prior to 1.0.7, update to version 1.0.7 or later. For Mozilla Suite versions prior to 1.7.12, update to version 1.7.12 or later.

Correção

Identificadores relacionados

CVE-2005-2702

DSA-838-1

DSA-866-1

DSA-868-1

RHSA-2005:785

RHSA-2005:789

RHSA-2005:791

RHSA-2005_785

RHSA-2005_789

RHSA-2005_791

Produtos afetados

Firefox

Suite

Red Hat

Referências · 47

• https://rhn.redhat.com/errata/RHSA-2005-791.html · Nota
• http://secunia.com/advisories/17014 · Nota
• http://secunia.com/advisories/17090 · Nota
• https://redhat.com/security/data/cve/CVE-2005-3089.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-2701.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-2704.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-2968.html · Nota
• http://secunia.com/advisories/16977 · Nota
• https://rhn.redhat.com/errata/RHSA-2005-789.html · Nota
• http://secunia.com/advisories/17149 · Nota
• https://redhat.com/security/data/cve/CVE-2005-2703.html · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2005:169 · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-2702.html · Nota
• http://debian.org/security/2005/dsa-838 · Aviso do Fabricante
• http://secunia.com/advisories/17284 · Nota