Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2005-0255
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0255

2005-05-0204:00:00
mitre
web.nvd.nist.gov
42
cve-2005-0255
mozilla
firefox
thunderbird
string handling
vulnerability
denial of service
arbitrary code
heap corruption
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.017

Percentile

87.8%

JSON

String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption.

Affected configurations

Nvd
Node
mozillafirefoxMatch1.0
OR
mozillamozillaMatch1.7.3
OR
mozillathunderbirdMatch0.1
OR
mozillathunderbirdMatch0.2
OR
mozillathunderbirdMatch0.3
OR
mozillathunderbirdMatch0.4
OR
mozillathunderbirdMatch0.5
OR
mozillathunderbirdMatch0.6
OR
mozillathunderbirdMatch0.7
OR
mozillathunderbirdMatch0.8
OR
mozillathunderbirdMatch0.9
OR
mozillathunderbirdMatch1.0
VendorProductVersionCPE
mozillathunderbird0.4cpe:/a:mozilla:thunderbird:0.4:::
mozillathunderbird0.1cpe:/a:mozilla:thunderbird:0.1:::
mozillathunderbird0.7cpe:/a:mozilla:thunderbird:0.7:::
mozillathunderbird0.5cpe:/a:mozilla:thunderbird:0.5:::
mozillafirefox1.0cpe:/a:mozilla:firefox:1.0:::
mozillathunderbird0.6cpe:/a:mozilla:thunderbird:0.6:::
mozillathunderbird0.9cpe:/a:mozilla:thunderbird:0.9:::
mozillathunderbird0.3cpe:/a:mozilla:thunderbird:0.3:::
mozillathunderbird1.0cpe:/a:mozilla:thunderbird:1.0:::
mozillathunderbird0.2cpe:/a:mozilla:thunderbird:0.2:::
Rows per page:
1-10 of 121

Related

cvelist 1
securityvulns 1
nessus 11
ubuntucve 1
redhat 3
nvd 1
openvas 7
suse 3
gentoo 3
ubuntu 1
cvelist
cvelist
CVE-2005-0255
2005-02-28 05:00:00
securityvulns
securityvulns
iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error
2005-02-28 00:00:00
nessus
nessus
RHEL 4 : mozilla (RHSA-2005:277)
2005-03-04 00:00:00
Fedora Core 3 : thunderbird-1.0.2-1.3.1 (2005-247)
2005-09-12 00:00:00
RHEL 4 : thunderbird (RHSA-2005:337)
2005-03-25 00:00:00
ubuntucve
ubuntucve
CVE-2005-0255
2005-05-02 00:00:00
redhat
redhat
(RHSA-2005:277) mozilla security update
2005-03-04 00:00:00
(RHSA-2005:337) thunderbird security update
2005-03-23 00:00:00
(RHSA-2005:176) firefox security update
2005-03-01 00:00:00
nvd
nvd
CVE-2005-0255
2005-05-02 04:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200503-32 (Thunderbird)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200503-32 (Thunderbird)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200503-30 (Mozilla)
2008-09-24 00:00:00
suse
suse
remote code execution in Mozilla Firefox
2005-03-16 14:07:55
remote code execution in MozillaThunderbird
2006-04-25 13:15:04
remote code execution in phpMyAdmin
2006-01-26 13:53:52
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2005-03-25 00:00:00
Mozilla Firefox: Various vulnerabilities
2005-03-04 00:00:00
Mozilla Suite: Multiple vulnerabilities
2005-03-25 00:00:00
ubuntu
ubuntu
Ubuntu 4.10 update for Firefox vulnerabilities
2005-07-28 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.017

Percentile

87.8%

JSON
Related for CVE-2005-0255
cvelist1securityvulns1nessus11ubuntucve1redhat3nvd1openvas7suse3gentoo3ubuntu1