PT-2005-1462 · Mozilla+1 · Mozilla Firefox+3

Josh Bressers · Published 2005-03-23 · Updated 2018-05-03 · CVE-2005-0399

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 1.0.2 Mozilla versions prior to 1.7.6 Thunderbird versions prior to 1.0.2

Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted GIF image. The issue is related to the Netscape extension 2 block and buffer size in the GIF2.cpp library.

Recommendations For Firefox versions prior to 1.0.2, update to version 1.0.2 or later. For Mozilla versions prior to 1.7.6, update to version 1.7.6 or later. For Thunderbird versions prior to 1.0.2, update to version 1.0.2 or later.

Fix

Related Identifiers

CVE-2005-0399

RHSA-2005:335

RHSA-2005:336

RHSA-2005:337

RHSA-2005_323

RHSA-2005_335

RHSA-2005_336

RHSA-2005_337

Affected Products

Firefox

Mozilla Firefox

Red Hat

Thunderbird

References · 47

• http://redhat.com/support/errata/RHSA-2005-335.html · Vendor Advisory
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877 · Vendor Advisory
• http://xforce.iss.net/xforce/alerts/id/191 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-336.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0399 · Security Note
• http://mozilla.org/security/announce/mfsa2005-30.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-323.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_04_25.html · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-337.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200503-30.xml · Vendor Advisory
• http://secunia.com/advisories/14654 · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-0141.html · Note
• http://kb.cert.org/vuls/id/557948 · Note
• https://redhat.com/security/data/cve/CVE-2005-0146.html · Note