Skip to content
OpenAdvisories
Unscored CVE-2005-2701 EUVD-2005-2702GHSA-m54c-37c8-7cfp

Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an…

Published Sep 23, 2005 · Updated Aug 7, 2024 · Assigned by redhat

Description

Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 3.1 mozilla 1:1.7.8-1sarge3 DSA-866-1
Debian 3.1 mozilla-firefox 1.0.4-2sarge5 DSA-838-1
Debian 3.1 mozilla-thunderbird 1.0.2-2.sarge1.0.7 DSA-868-1
Debian 3.0 mozilla No fix yet DSA-866-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 4 devhelp +1 0.9.2-2.4.7 RHSA-2005:789
RHEL 4 firefox 1.0.7-1.4.1 RHSA-2005:785

Advisories 5

References