Lucene search
Mozilla FoundationMFSA2005-33HistoryApr 15, 2005 - 12:00 a.m.
Javascript "lambda" replace exposes memory contents — Mozilla
2005-04-1500:00:00
Mozilla Foundation
www.mozilla.org
28
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0.924
Percentile
99.0%
A bug in javascript’s regular expression string replacement when using an anonymous function as the replacement argument allows a malicious script to capture blocks of memory allocated to the browser. A web site could capture data and transmit it to a server without user interaction or knowledge.
Affected configurations
Node
mozillafirefoxRange<1.0.3
ORmozillamozilla_suiteRange<1.7.7
Related
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200504-18 (Mozilla)
2008-09-24 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2005-07-18 00:00:00
Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities
2005-04-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox JavaScript Engine Information Disclosure (CVE-2005-0989)
2009-10-29 00:00:00
freebsd
freebsd
mozilla -- javascript "lambda" replace exposes memory contents
2005-04-01 00:00:00
cvelist
cvelist
CVE-2005-0989
2005-04-06 04:00:00
nvd
nvd
CVE-2005-0989
2005-05-02 04:00:00
cve
cve
CVE-2005-0989
2005-05-02 04:00:00
nessus
nessus
GLSA-200507-17 : Mozilla Thunderbird: Multiple vulnerabilities
2005-07-18 00:00:00
FreeBSD : mozilla -- javascript 'lambda' replace exposes memory contents (45b75152-ae5f-11d9-a788-0001020eed82)
2005-07-13 00:00:00
GLSA-200504-18 : Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities
2005-04-19 00:00:00
ubuntucve
ubuntucve
CVE-2005-0989
2005-05-02 00:00:00
redhat
redhat
(RHSA-2005:386) Mozilla security update
2005-04-26 00:00:00
(RHSA-2005:601) thunderbird security update
2005-07-21 00:00:00
(RHSA-2005:383) firefox security update
2005-04-21 00:00:00
centos
centos
mozilla security update
2005-04-26 19:07:32
thunderbird security update
2005-07-22 15:22:09
firefox security update
2005-04-21 11:02:39
debian
debian
osv
osv
mozilla-thunderbird - several
2005-08-23 00:00:00
ubuntu
ubuntu
Mozilla Thunderbird vulnerabilities
2005-08-01 00:00:00
Ubuntu 4.10 update for Firefox vulnerabilities
2005-07-28 00:00:00
suse
suse
remote code execution in Mozilla. Mozilla Firefox
2005-04-27 14:48:46
remote code execution in MozillaThunderbird
2006-04-25 13:15:04
remote code execution in phpMyAdmin
2006-01-26 13:53:52
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0.924
Percentile
99.0%
Related for MFSA2005-33