Description
Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
References
- RHSA-2003:046 vendor-advisory
- http://bugzilla.mozilla.org/show_bug.cgi?id=157989
- 5665 vdb-entry
- MDKSA-2002:075 vendor-advisory
- http://crash.ihug.co.nz/~Sneuro/zerogif/
- RHSA-2002:192 vendor-advisory
- 20020906 zero-width gif: exploit PoC for NS6.2.3 (fixed in 7.0) [Was: GIFs mailing-list
- netscape-zero-gif-bo(10058) vdb-entry