CVE-2005-2871 Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and poss...
HighCVSS 7.5
EPSS 21.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla Firefox | = 1.0.6 | No fix listed |
| mozilla Firefox | = 1.5-beta1 | No fix listed |
References
- 20050911 FireFox "Host:" Buffer Overflow is not just exploitable on FireFox mailing-list
- 20050909 Mozilla Firefox "Host:" Buffer Overflow mailing-list
- 16764 third-party-advisory
- 16766 third-party-advisory
- 16767 third-party-advisory
- 17042 third-party-advisory
- 17090 third-party-advisory
- 17263 third-party-advisory
- 17284 third-party-advisory
- 83 third-party-advisory
- 1014877 vdb-entry
- P-303 government-resource third-party-advisory
- DSA-837 vendor-advisory
- DSA-866 vendor-advisory
- DSA-868 vendor-advisory
- GLSA-200509-11 vendor-advisory
- VU#573857 third-party-advisory us-government-resource
- MDKSA-2005:174 vendor-advisory
- www.mozilla.org
- 19255 vdb-entry
- FLSA-2006:168375 vendor-advisory
- RHSA-2005:768 vendor-advisory
- RHSA-2005:769 vendor-advisory
- RHSA-2005:791 vendor-advisory
- www.securiteam.com
- www.security-protocols.com exploit vendor-advisory
- www.security-protocols.com exploit
- 14784 vdb-entry
- USN-181-1 vendor-advisory
- ADV-2005-1690 vdb-entry
- ADV-2005-1691 vdb-entry
- ADV-2005-1824 vdb-entry
- bugzilla.mozilla.org
- mozilla-url-bo(22207) vdb-entry
- oval:org.mitre.oval:def:1287 signature vdb-entry
- oval:org.mitre.oval:def:584 signature vdb-entry
- oval:org.mitre.oval:def:9608 signature vdb-entry