Unscored DSA-866-1 8 CVEs

mozilla - several

Published Oct 20, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.0	mozilla	—
Debian · 3.1	mozilla	1:1.7.8-1sarge3

Vulnerabilities 8

Unscored —

CVE-2005-2701

Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute a…

Sep 23, 2005
Unscored —

CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and p…

Sep 23, 2005
Unscored —

CVE-2005-2703

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP request…

Sep 23, 2005
Unscored —

CVE-2005-2704

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control th…

Sep 23, 2005
Unscored —

CVE-2005-2705

Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote at…

Sep 23, 2005
Unscored —

CVE-2005-2706

Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileg…

Sep 23, 2005
Unscored —

CVE-2005-2707

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface co…

Sep 23, 2005
Unscored —

CVE-2005-2871 Public exploit EPSS 21%

Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3…

Sep 9, 2005