PT-2005-4833 · Netscape+4 · Netscape+4

Published 2005-12-09 · Updated 2018-10-19 · CVE-2005-4134

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 1.5 Netscape versions 7.2 and 8.0.4 K-Meleon versions prior to 0.9.12

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and delayed application startup, via a web site with a large title. This title is recorded in history.dat but not processed efficiently during startup. It has been reported that Netscape 8.1 does not have this issue.

Recommendations For Mozilla Firefox version 1.5, consider restricting the size of titles that can be recorded in history.dat to prevent excessive CPU consumption. For Netscape versions 7.2 and 8.0.4, avoid using the affected versions until a fix is available. For K-Meleon versions prior to 0.9.12, update to version 0.9.12 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-4134

DSA-1044-1

DSA-1046-1

DSA-1051-1

HPSBUX02122

RHSA-2006:0200

RHSA-2006_0200

Affected Products

Hp-Ux

K-Meleon

Firefox

Netscape

Red Hat

References · 89

• 🔥 https://exploit-db.com/exploits/26762 · Exploit
• http://redhat.com/support/errata/RHSA-2006-0199.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0296 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1739 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-4134 · Security Note
• http://secunia.com/advisories/17946 · Vendor Advisory
• http://securityfocus.com/archive/1/425975/100/0/threaded · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200604-18.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1732 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0749 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1733 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1741 · Security Note
• http://redhat.com/support/errata/RHSA-2006-0200.html · Vendor Advisory
• https://usn.ubuntu.com/275-1 · Vendor Advisory