Lucene search

MitreCVE-2005-4134

HistoryDec 09, 2005 - 3:03 p.m.

CVE-2005-4134

2005-12-0915:03:00

mitre

web.nvd.nist.gov

cve-2005-4134

mozilla firefox

netscape

k-meleon

denial of service

cpu consumption

delayed startup

web history

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.961

Percentile

99.5%

JSON

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.

Affected configurations

Nvd

Node

k-meleon_projectk-meleonRange≤0.9

k-meleon_projectk-meleonMatch0.7

k-meleon_projectk-meleonMatch0.7_service_pack_1

k-meleon_projectk-meleonMatch0.8

k-meleon_projectk-meleonMatch0.8.1

k-meleon_projectk-meleonMatch0.8.2

mozillafirefoxRange≤1.5

mozillamozilla_suiteRange≤1.7.12

netscapenavigatorRange≤8.0.40

netscapenavigatorMatch7.1

netscapenavigatorMatch7.2

VendorProductVersionCPE
k-meleon_projectk-meleon*cpe:2.3:a:k-meleon_project:k-meleon:*:*:*:*:*:*:*:*
k-meleon_projectk-meleon0.7cpe:2.3:a:k-meleon_project:k-meleon:0.7:*:*:*:*:*:*:*
k-meleon_projectk-meleon0.7_service_pack_1cpe:2.3:a:k-meleon_project:k-meleon:0.7_service_pack_1:*:*:*:*:*:*:*
k-meleon_projectk-meleon0.8cpe:2.3:a:k-meleon_project:k-meleon:0.8:*:*:*:*:*:*:*
k-meleon_projectk-meleon0.8.1cpe:2.3:a:k-meleon_project:k-meleon:0.8.1:*:*:*:*:*:*:*
k-meleon_projectk-meleon0.8.2cpe:2.3:a:k-meleon_project:k-meleon:0.8.2:*:*:*:*:*:*:*
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillamozilla_suite*cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*
netscapenavigator*cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*
netscapenavigator7.1cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
k-meleon_project	k-meleon	*	cpe:2.3:a:k-meleon_project:k-meleon::::::::
k-meleon_project	k-meleon	0.7	cpe:2.3:a:k-meleon_project:k-meleon:0.7:::::::*
k-meleon_project	k-meleon	0.7_service_pack_1	cpe:2.3:a:k-meleon_project:k-meleon:0.7_service_pack_1:::::::*
k-meleon_project	k-meleon	0.8	cpe:2.3:a:k-meleon_project:k-meleon:0.8:::::::*
k-meleon_project	k-meleon	0.8.1	cpe:2.3:a:k-meleon_project:k-meleon:0.8.1:::::::*
k-meleon_project	k-meleon	0.8.2	cpe:2.3:a:k-meleon_project:k-meleon:0.8.2:::::::*
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::
mozilla	mozilla_suite	*	cpe:2.3:a:mozilla:mozilla_suite::::::::
netscape	navigator	*	cpe:2.3:a:netscape:navigator::::::::
netscape	navigator	7.1	cpe:2.3:a:netscape:navigator:7.1:::::::*

Rows per page:

1-10 of 111

References

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U

marc.info/?l=full-disclosure&m=113404911919629&w=2

marc.info/?l=full-disclosure&m=113405896025702&w=2

secunia.com/advisories/17934

secunia.com/advisories/17944

secunia.com/advisories/17946

secunia.com/advisories/18700

secunia.com/advisories/18704

secunia.com/advisories/18705

secunia.com/advisories/18706

secunia.com/advisories/18708

secunia.com/advisories/18709

secunia.com/advisories/19230

secunia.com/advisories/19746

secunia.com/advisories/19759

secunia.com/advisories/19852

secunia.com/advisories/19862

secunia.com/advisories/19863

secunia.com/advisories/19902

secunia.com/advisories/19941

secunia.com/advisories/21033

secunia.com/advisories/21622

securitytracker.com/id?1015328

sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1

sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1

support.avaya.com/elmodocs2/security/ASA-2006-205.htm

www.debian.org/security/2006/dsa-1044

www.debian.org/security/2006/dsa-1046

www.debian.org/security/2006/dsa-1051

www.gentoo.org/security/en/glsa/glsa-200604-12.xml

www.gentoo.org/security/en/glsa/glsa-200604-18.xml

www.mandriva.com/security/advisories?name=MDKSA-2006:036

www.mandriva.com/security/advisories?name=MDKSA-2006:037

www.mozilla.org/security/announce/mfsa2006-03.html

www.mozilla.org/security/history-title.html

www.networksecurity.fi/advisories/netscape-history.html

www.osvdb.org/21533

www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html

www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html

www.redhat.com/support/errata/RHSA-2006-0199.html

www.redhat.com/support/errata/RHSA-2006-0200.html

www.securityfocus.com/archive/1/425975/100/0/threaded

www.securityfocus.com/archive/1/425978/100/0/threaded

www.securityfocus.com/archive/1/438730/100/0/threaded

www.securityfocus.com/bid/15773

www.securityfocus.com/bid/16476

www.vupen.com/english/advisories/2005/2805

www.vupen.com/english/advisories/2006/0413

www.vupen.com/english/advisories/2006/3391

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11382

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1619

usn.ubuntu.com/271-1/

usn.ubuntu.com/275-1/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.961

Percentile

99.5%

JSON

Related for CVE-2005-4134