CVE

Id
11461  
CVE No.
CVE-2005-0255  
Status
Candidate  
Description
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption.  
Phase
Assigned (20050209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81837 11461 CVE-2005-0255 IDEFENSE:20050228 Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error  View
81838 11461 CVE-2005-0255 URL:http://www.idefense.com/application/poi/display?id=200&type=vulnerabilities  View
81839 11461 CVE-2005-0255 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-18.html  View
81840 11461 CVE-2005-0255 GENTOO:GLSA-200503-10  View
81841 11461 CVE-2005-0255 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml  View
81842 11461 CVE-2005-0255 GENTOO:GLSA-200503-30  View
81843 11461 CVE-2005-0255 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml  View
81844 11461 CVE-2005-0255 REDHAT:RHSA-2005:277  View
81845 11461 CVE-2005-0255 URL:http://www.redhat.com/support/errata/RHSA-2005-277.html  View
81846 11461 CVE-2005-0255 REDHAT:RHSA-2005:337  View
81847 11461 CVE-2005-0255 URL:http://www.redhat.com/support/errata/RHSA-2005-337.html  View
81848 11461 CVE-2005-0255 REDHAT:RHSA-2005:176  View
81849 11461 CVE-2005-0255 URL:http://www.redhat.com/support/errata/RHSA-2005-176.html  View
81850 11461 CVE-2005-0255 SUSE:SUSE-SA:2005:016  View
81851 11461 CVE-2005-0255 URL:http://www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.html  View
81852 11461 CVE-2005-0255 SUSE:SUSE-SA:2006:022  View
81853 11461 CVE-2005-0255 URL:http://www.novell.com/linux/security/advisories/2006_04_25.html  View
81854 11461 CVE-2005-0255 BID:12659  View
81855 11461 CVE-2005-0255 URL:http://www.securityfocus.com/bid/12659  View
81856 11461 CVE-2005-0255 OVAL:oval:org.mitre.oval:def:100040  View
81857 11461 CVE-2005-0255 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100040  View
81858 11461 CVE-2005-0255 OVAL:oval:org.mitre.oval:def:9111  View
81859 11461 CVE-2005-0255 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9111  View
81860 11461 CVE-2005-0255 SECUNIA:19823  View

Related JVN