National Cyber Awareness System

Vulnerability Summary for CVE-2005-0399

Overview

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#557948

Name: VU#557948

Type: Advisory

Hyperlink:http://www.kb.cert.org/vuls/id/557948

External Source: SECUNIA

Name: 14654

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/14654

External Source: MISC

Name: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877

Type: Advisory

Hyperlink:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877

External Source: XF

Name: gif-extension-overflow(19269)

Hyperlink:http://xforce.iss.net/xforce/xfdb/19269

External Source: ISS

Name: 20050323 Mozilla Foundation GIF Overflow

Type: Advisory

Hyperlink:http://xforce.iss.net/xforce/alerts/id/191

External Source: VUPEN

Name: ADV-2005-0296

Hyperlink:http://www.vupen.com/english/advisories/2005/0296

External Source: BID

Name: 12881

Hyperlink:http://www.securityfocus.com/bid/12881

External Source: REDHAT

Name: RHSA-2005:337

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-337.html

External Source: REDHAT

Name: RHSA-2005:336

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-336.html

External Source: REDHAT

Name: RHSA-2005:335

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-335.html

External Source: REDHAT

Name: RHSA-2005:323

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-323.html

External Source: SUSE

Name: SUSE-SA:2006:004

Hyperlink:http://www.novell.com/linux/security/advisories/2006_04_25.html

External Source: CONFIRM

Name: http://www.mozilla.org/security/announce/mfsa2005-30.html

Type: Advisory

Hyperlink:http://www.mozilla.org/security/announce/mfsa2005-30.html

External Source: GENTOO

Name: GLSA-200503-30

Type: Advisory

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

External Source: CIAC

Name: P-160

Hyperlink:http://www.ciac.org/ciac/bulletins/p-160.shtml

External Source: OVAL

Name: oval:org.mitre.oval:def:11377

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11377

External Source: BID

Name: 15495

Hyperlink:http://www.securityfocus.com/bid/15495

External Source: SUSE

Name: SUSE-SA:2006:004

Hyperlink:http://www.novell.com/linux/security/advisories/2006_04_25.html

External Source: SECUNIA

Name: 19823

Hyperlink:http://secunia.com/advisories/19823

External Source: SCO

Name: SCOSA-2005.49

Hyperlink:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt

US Government Resource: oval:org.mitre.oval:def:100028

Name: oval:org.mitre.oval:def:100028

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100028

References to Check Content

Identifier:oval:org.mitre.oval:def:100028

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:100028

Identifier:oval:org.mitre.oval:def:11377

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11377