CVE-2002-2061 Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width and height values....
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width and height values and an 8-bit or 16-bit alpha channel.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | <= 1.0 | No fix listed |
| netscape navigator | = 6.2.3 | No fix listed |
References
- bugzilla.mozilla.org patch
- links-png-image-bo(9287) patch vdb-entry
- MDKSA-2002:074 vendor-advisory
- www.mozilla.org patch