PT-2005-3053 · K Meleon+4 · K-Meleon+5

Paul Kurczaba · Published 2005-07-01 · Updated 2017-10-11 · CVE-2005-2114

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Mozilla version 1.7.8 Firefox version 1.0.4 Camino version 0.8.4 Netscape version 8.0.2 K-Meleon version 0.9

Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved through JavaScript that repeatedly calls an empty function.

Recommendations: For Mozilla version 1.7.8, update to a version that includes a fix for this issue. For Firefox version 1.0.4, update to a version that includes a fix for this issue. For Camino version 0.8.4, update to a version that includes a fix for this issue. For Netscape version 8.0.2, update to a version that includes a fix for this issue. For K-Meleon version 0.9, update to a version that includes a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2005-2114

RHSA-2005:586

RHSA-2005:587

RHSA-2005_586

RHSA-2005_587

Affected Products

Camino

Firefox

K-Meleon

Mozilla Firefox

Netscape

Red Hat

References · 41

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/mozilla_compareto.rb · Exploit
• 🔥 http://kurczaba.com/html/security/0506241.htm · Exploit
• http://redhat.com/support/errata/RHSA-2005-586.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2114 · Security Note
• http://redhat.com/support/errata/RHSA-2005-587.html · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-2267.html · Note
• http://secunia.com/advisories/15489 · Note
• http://securitytracker.com/id?1014372 · Note
• https://redhat.com/security/data/cve/CVE-2005-2114.html · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=295011 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21188 · Note
• https://redhat.com/security/data/cve/CVE-2005-2260.html · Note
• https://redhat.com/security/data/cve/CVE-2005-2262.html · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=294074 · Note
• http://securitytracker.com/id?1014349 · Note