Vulnerability Description
Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | 0.8 |
| Mozilla | Mozilla | 1.3 |
| Mozilla | Thunderbird | 0.1 |
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
- http://secunia.com/advisories/14654PatchVendor Advisory
- http://secunia.com/advisories/19823
- http://www.ciac.org/ciac/bulletins/p-160.shtml
- http://www.gentoo.org/security/en/glsa/glsa-200503-30.xmlVendor Advisory
- http://www.kb.cert.org/vuls/id/557948Third Party AdvisoryUS Government Resource
- http://www.mozilla.org/security/announce/mfsa2005-30.htmlVendor Advisory
- http://www.novell.com/linux/security/advisories/2006_04_25.html
- http://www.redhat.com/support/errata/RHSA-2005-323.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-335.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-336.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-337.htmlVendor Advisory
- http://www.securityfocus.com/bid/12881
- http://www.securityfocus.com/bid/15495
- http://www.vupen.com/english/advisories/2005/0296
FAQ
What is CVE-2005-0399?
CVE-2005-0399 is a vulnerability with a CVSS score of 5.1 (MEDIUM). Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attacker...
How severe is CVE-2005-0399?
CVE-2005-0399 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-0399?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Mozilla, Mozilla Thunderbird.