CVE

Id
9744  
CVE No.
CVE-2004-1316  
Status
Candidate  
Description
Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing "" (backslash) character, which prevents a string from being NULL terminated.  
Phase
Assigned (20041230)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66140 9744 CVE-2004-1316 BUGTRAQ:20041229 Heap overflow in Mozilla Browser <= 1.7.3 NNTP code.  View
66141 9744 CVE-2004-1316 URL:http://marc.info/?l=bugtraq&m=110436284718949&w=2  View
66142 9744 CVE-2004-1316 MISC:http://isec.pl/vulnerabilities/isec-0020-mozilla.txt  View
66143 9744 CVE-2004-1316 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-06.html  View
66144 9744 CVE-2004-1316 HP:HPSBTU01114  View
66145 9744 CVE-2004-1316 URL:http://marc.info/?l=bugtraq&m=110780717916478&w=2  View
66146 9744 CVE-2004-1316 HP:HPSBUX01133  View
66147 9744 CVE-2004-1316 HP:SSRT5940  View
66148 9744 CVE-2004-1316 REDHAT:RHSA-2005:038  View
66149 9744 CVE-2004-1316 URL:http://www.redhat.com/support/errata/RHSA-2005-038.html  View
66150 9744 CVE-2004-1316 SUSE:SUSE-SA:2006:022  View
66151 9744 CVE-2004-1316 URL:http://www.novell.com/linux/security/advisories/2006_04_25.html  View
66152 9744 CVE-2004-1316 BID:12131  View
66153 9744 CVE-2004-1316 URL:http://www.securityfocus.com/bid/12131  View
66154 9744 CVE-2004-1316 OVAL:oval:org.mitre.oval:def:100052  View
66155 9744 CVE-2004-1316 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100052  View
66156 9744 CVE-2004-1316 OVAL:oval:org.mitre.oval:def:9808  View
66157 9744 CVE-2004-1316 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9808  View
66158 9744 CVE-2004-1316 SECUNIA:19823  View
66159 9744 CVE-2004-1316 URL:http://secunia.com/advisories/19823  View
66160 9744 CVE-2004-1316 XF:mozilla-nntp-bo(18711)  View

Related JVN