CVE-2005-2265 Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by callin...
MediumCVSS 5.0
EPSS 68.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 0.8 | No fix listed |
| mozilla Firefox | = 0.9 | No fix listed |
| mozilla Firefox | = 0.9-rc | No fix listed |
| mozilla Firefox | = 0.9.1 | No fix listed |
| mozilla Firefox | = 0.9.2 | No fix listed |
| mozilla Firefox | = 0.9.3 | No fix listed |
| mozilla Firefox | = 0.10 | No fix listed |
| mozilla Firefox | = 0.10.1 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla | = 1.3 | No fix listed |
| mozilla | = 1.4 | No fix listed |
| mozilla | = 1.4-alpha | No fix listed |
| mozilla | = 1.4.1 | No fix listed |
| mozilla | = 1.5 | No fix listed |
| mozilla | = 1.5-alpha | No fix listed |
| mozilla | = 1.5-rc1 | No fix listed |
| mozilla | = 1.5-rc2 | No fix listed |
| mozilla | = 1.5.1 | No fix listed |
| mozilla | = 1.6 | No fix listed |
| mozilla | = 1.6-alpha | No fix listed |
| mozilla | = 1.6-beta | No fix listed |
Show 13 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 1.7 | No fix listed |
| mozilla | = 1.7-alpha | No fix listed |
| mozilla | = 1.7-beta | No fix listed |
| mozilla | = 1.7-rc1 | No fix listed |
| mozilla | = 1.7-rc2 | No fix listed |
| mozilla | = 1.7-rc3 | No fix listed |
| mozilla | = 1.7.1 | No fix listed |
| mozilla | = 1.7.2 | No fix listed |
| mozilla | = 1.7.3 | No fix listed |
| mozilla | = 1.7.5 | No fix listed |
| mozilla | = 1.7.6 | No fix listed |
| mozilla | = 1.7.7 | No fix listed |
| mozilla | = 1.7.8 | No fix listed |
References
- 16043 third-party-advisory
- 16044 third-party-advisory
- 16059 third-party-advisory
- 19823 third-party-advisory
- P-252 government-resource third-party-advisory
- DSA-810 vendor-advisory
- www.mozilla.org patch vendor-advisory
- www.networksecurity.fi
- SUSE-SR:2005:018 vendor-advisory
- SUSE-SA:2005:045 vendor-advisory
- SUSE-SA:2006:022 vendor-advisory
- RHSA-2005:586 vendor-advisory
- RHSA-2005:587 vendor-advisory
- RHSA-2005:601 vendor-advisory
- 14242 vdb-entry
- ADV-2005-1075 vdb-entry
- bugzilla.mozilla.org exploit vendor-advisory
- FLSA:160202 vendor-advisory
- oval:org.mitre.oval:def:100008 signature vdb-entry
- oval:org.mitre.oval:def:10397 signature vdb-entry
- oval:org.mitre.oval:def:417 signature vdb-entry
- oval:org.mitre.oval:def:781 signature vdb-entry