PT-2005-3587 · Mozilla+1 · Firefox+2

Mats Palmgren · Published 2005-09-22 · Updated 2017-10-11 · CVE-2005-2702

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 1.0.7 Mozilla Suite versions prior to 1.7.12

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.

Recommendations For Firefox versions prior to 1.0.7, update to version 1.0.7 or later. For Mozilla Suite versions prior to 1.7.12, update to version 1.7.12 or later.

Fix

Related Identifiers

CVE-2005-2702

DSA-838-1

DSA-866-1

DSA-868-1

RHSA-2005:785

RHSA-2005:789

RHSA-2005:791

RHSA-2005_785

RHSA-2005_789

RHSA-2005_791

Affected Products

Firefox

Suite

Red Hat

References · 47

• http://mandriva.com/security/advisories?name=MDKSA-2005:169 · Vendor Advisory
• http://debian.org/security/2005/dsa-838 · Vendor Advisory
• http://debian.org/security/2005/dsa-868 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2702 · Security Note
• http://redhat.com/support/errata/RHSA-2005-789.html · Vendor Advisory
• http://debian.org/security/2005/dsa-866 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-791.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_58_mozilla.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:170 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-785.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:174 · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt · Vendor Advisory
• http://ubuntu.com/usn/usn-200-1 · Vendor Advisory
• http://redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2005-791.html · Note