Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-0989
HistoryMay 02, 2005 - 12:00 a.m.

CVE-2005-0989

2005-05-0200:00:00
ubuntu.com
ubuntu.com
29

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.924

Percentile

99.0%

The find_replen function in jsstr.c in the Javascript engine for Mozilla
Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote
attackers to read portions of heap memory in a Javascript string via the
lambda replace method.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmozilla< 1.7.12-1.1ubuntu2UNKNOWN
ubuntu6.10noarchmozilla< 1.7.12-1.1ubuntu2UNKNOWN
ubuntu6.06noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.06UNKNOWN
ubuntu6.10noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchmozilla-thunderbird< 1.5.0.13-0ubuntu0.7.04UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.924

Percentile

99.0%