CVE-2004-1613 Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG....
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 1.0 | No fix listed |
| mozilla | = 1.0-rc1 | No fix listed |
| mozilla | = 1.0-rc2 | No fix listed |
| mozilla | = 1.0.1 | No fix listed |
| mozilla | = 1.0.2 | No fix listed |
| mozilla | = 1.1 | No fix listed |
| mozilla | = 1.1-alpha | No fix listed |
| mozilla | = 1.1-beta | No fix listed |
| mozilla | = 1.2 | No fix listed |
| mozilla | = 1.2-alpha | No fix listed |
| mozilla | = 1.2-beta | No fix listed |
| mozilla | = 1.2.1 | No fix listed |
| mozilla | = 1.3 | No fix listed |
| mozilla | = 1.3.1 | No fix listed |
| mozilla | = 1.4 | No fix listed |
| mozilla | = 1.4-alpha | No fix listed |
| mozilla | = 1.4-beta | No fix listed |
| mozilla | = 1.4.1 | No fix listed |
| mozilla | = 1.4.2 | No fix listed |
| mozilla | = 1.4.4 | No fix listed |
| mozilla | = 1.5 | No fix listed |
| mozilla | = 1.6 | No fix listed |
| mozilla | = 1.7 | No fix listed |
| mozilla | = 1.7-rc3 | No fix listed |
| mozilla | = 1.7.1 | No fix listed |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 1.7.2 | No fix listed |
| mozilla | = 1.7.3 | No fix listed |
| mozilla | = 1.8-alpha2 | No fix listed |
| sgi propack | = 3.0 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat fedora core | = core_1.0 | No fix listed |
| redhat fedora core | = core_2.0 | No fix listed |
| redhat linux | = 7.3 | No fix listed |
| redhat linux | = 9.0 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
References
- lcamtuf.coredump.cx exploit
- 20041018 Web browsers - a mini-farce exploit mailing-list vendor-advisory
- 20041018 Web browsers - a mini-farce mailing-list
- 1011810 exploit vdb-entry vendor-advisory
- RHSA-2005:323 patch vendor-advisory
- 11439 exploit patch vdb-entry vendor-advisory
- mozilla-html-tags-dos(17805) vdb-entry
- oval:org.mitre.oval:def:10227 signature vdb-entry