Lucene search

K
nvd[email protected]NVD:CVE-2004-1316
HistoryDec 29, 2004 - 5:00 a.m.

CVE-2004-1316

2004-12-2905:00:00
web.nvd.nist.gov
6

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.058

Percentile

93.5%

Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '' (backslash) character, which prevents a string from being NULL terminated.

Affected configurations

Nvd
Node
mozillamozilla
OR
mozillamozillaMatch1.3
OR
mozillamozillaMatch1.4
OR
mozillamozillaMatch1.4alpha
OR
mozillamozillaMatch1.4.1
OR
mozillamozillaMatch1.5
OR
mozillamozillaMatch1.5alpha
OR
mozillamozillaMatch1.5rc1
OR
mozillamozillaMatch1.5rc2
OR
mozillamozillaMatch1.5.1
OR
mozillamozillaMatch1.6
OR
mozillamozillaMatch1.6alpha
OR
mozillamozillaMatch1.6beta
OR
mozillamozillaMatch1.7
OR
mozillamozillaMatch1.7alpha
OR
mozillamozillaMatch1.7beta
OR
mozillamozillaMatch1.7rc1
OR
mozillamozillaMatch1.7rc2
OR
mozillamozillaMatch1.7rc3
OR
mozillamozillaMatch1.7.1
OR
mozillamozillaMatch1.7.2
OR
mozillamozillaMatch1.7.3
VendorProductVersionCPE
mozillamozilla*cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*
mozillamozilla1.3cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*
mozillamozilla1.4cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*
mozillamozilla1.4cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*
mozillamozilla1.4.1cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*
mozillamozilla1.5cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*
mozillamozilla1.5cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*
mozillamozilla1.5cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*
mozillamozilla1.5cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*
mozillamozilla1.5.1cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 221

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.058

Percentile

93.5%