PT-2005-1335 · Mozilla+1 · Thunderbird+3

Daniel De Wildt + 1 · Published 2005-02-28 · Updated 2017-10-11 · CVE-2005-0255

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla versions 1.7.3 Firefox version 1.0 Thunderbird versions prior to 1.0.2

Description The issue is related to string handling functions, such as the nsTSubstring CharT::Replace function, which do not properly check the return values of other functions that resize the string. This allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, leading to heap corruption.

Recommendations For Mozilla version 1.7.3, update to a version that includes the fix for this issue. For Firefox version 1.0, update to a version that includes the fix for this issue. For Thunderbird versions prior to 1.0.2, update to version 1.0.2 or later.

Fix

Related Identifiers

CVE-2005-0255

RHSA-2005:176

RHSA-2005:337

RHSA-2005_176

RHSA-2005_277

RHSA-2005_337

Affected Products

Firefox

Mozilla Firefox

Red Hat

Thunderbird

References · 45

• http://gentoo.org/security/en/glsa/glsa-200503-30.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-277.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200503-10.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-337.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0255 · Security Note
• http://mozilla.org/security/announce/mfsa2005-18.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-176.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_16_mozilla_firefox.html · Vendor Advisory
• http://idefense.com/application/poi/display?id=200&type=vulnerabilities · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_04_25.html · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-0255.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0592.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0232.html · Note
• http://shmoo.com/idn · Note
• https://redhat.com/security/data/cve/CVE-2005-0399.html · Note