Lucene search

K
cveMitreCVE-2005-2414
HistoryAug 03, 2005 - 4:00 a.m.

CVE-2005-2414

2005-08-0304:00:00
mitre
web.nvd.nist.gov
38
cve-2005-2414
xpcom library
web browsers
firefox
mozilla
netscape
galeon
denial of service
application crash
dom
nested div tags
nvd

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.053

Percentile

93.1%

Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service (application crash) via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering page and referenced objects to be deleted.

Affected configurations

Nvd
Node
xpcomxpcom
VendorProductVersionCPE
xpcomxpcom*cpe:2.3:a:xpcom:xpcom:*:*:*:*:*:*:*:*

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.053

Percentile

93.1%