Home > Vulnerability Database > CVE-2005-0399

Mend.io Vulnerability Database

CVE-2005-0399

Date: March 24, 2005

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

Severity Score

5.6

Related Resources (23)

Url: https://nvd.nist.gov/vuln/detail/CVE-2005-0399

Url: http://www.redhat.com/support/errata/RHSA-2005-337.html

Url: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/19269

Url: http://www.redhat.com/support/errata/RHSA-2005-323.html

Url: http://www.securityfocus.com/bid/15495

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377

Url: http://www.ciac.org/ciac/bulletins/p-160.shtml

Url: http://www.mozilla.org/security/announce/mfsa2005-30.html

Url: http://secunia.com/advisories/14654

Url: http://secunia.com/advisories/19823

Url: http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml

Url: http://www.redhat.com/support/errata/RHSA-2005-336.html

Url: http://www.novell.com/linux/security/advisories/2006_04_25.html

Url: http://www.vupen.com/english/advisories/2005/0296

Url: http://www.redhat.com/support/errata/RHSA-2005-335.html

Url: http://www.kb.cert.org/vuls/id/557948

Url: http://www.securityfocus.com/bid/12881

Url: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877

Url: http://xforce.iss.net/xforce/alerts/id/191

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2005-0399

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028

Url: https://www.mend.io/vulnerability-database/CVE-2005-0399

Severity Score

5.6

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	5.1
Access Vector (AV):	NETWORK
Access Complexity (AC):	HIGH
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2005-0399

Date: March 24, 2005

Severity Score

Related Resources (23)

Severity Score

CVSS v3.1

CVSS v2

Do you need more information?