CVE-2005-0592

Published: Mar 25, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value.

Affected (31)

Products: Mozilla: Firefox, Mozilla

2 products

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0
Mozilla Mozilla	Version 1.3
Mozilla Mozilla	Version 1.4.1
Mozilla Mozilla	Version 1.4
Mozilla Mozilla	Version 1.4 alpha
Mozilla Mozilla	Version 1.5.1
Mozilla Mozilla	Version 1.5
Mozilla Mozilla	Version 1.5 alpha
Mozilla Mozilla	Version 1.5 rc1
Mozilla Mozilla	Version 1.5 rc2
Mozilla Mozilla	Version 1.6
Mozilla Mozilla	Version 1.6 alpha
Mozilla Mozilla	Version 1.6 beta
Mozilla Mozilla	Version 1.7.1
Mozilla Mozilla	Version 1.7.2
Mozilla Mozilla	Version 1.7.3
Mozilla Mozilla	Version 1.7.5
Mozilla Mozilla	Version 1.7
Mozilla Mozilla	Version 1.7 alpha
Mozilla Mozilla	Version 1.7 beta
Mozilla Mozilla	Version 1.7 rc1
Mozilla Mozilla	Version 1.7 rc2
Mozilla Mozilla	Version 1.7 rc3

References (20)

http://secunia.com/advisories/19823

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml

Source: secalert@redhat.com

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Source: secalert@redhat.com

Vendor Advisory

http://www.mozilla.org/security/announce/mfsa2005-15.html

Source: secalert@redhat.com

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_04_25.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-176.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/12659

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=241440

Source: secalert@redhat.com

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100043

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10606

Source: secalert@redhat.com

http://secunia.com/advisories/19823

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mozilla.org/security/announce/mfsa2005-15.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_04_25.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-176.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/12659

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=241440

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100043

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10606

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.