CVE-2004-1200

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.

Affected (9)

Products: Mozilla: Firefox

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version preview_release

References (10)

http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029434.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029491.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/11752

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/11760

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18282

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029434.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029491.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11752

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/bid/11760

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/18282

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.