Lucene search

K
nvd[email protected]NVD:CVE-2005-0989
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0989

2005-05-0204:00:00
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.924

Percentile

99.0%

The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.

Affected configurations

Nvd
Node
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillamozillaMatch1.7.6
OR
netscapenavigatorMatch7.2

References

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.924

Percentile

99.0%