NVD

Id
66019  
Name
CVE-2005-0255  
Description
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2011-03-07  
Seq
2005-0255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
343993 66019 CVE-2005-0255 oval:org.mitre.oval:def:100040  View
343994 66019 CVE-2005-0255 oval:org.mitre.oval:def:9111  View
343995 66019 CVE-2005-0255 GLSA-200503-10  View
343996 66019 CVE-2005-0255 GLSA-200503-30  View
343997 66019 CVE-2005-0255 20050228 Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error  View
343998 66019 CVE-2005-0255 http://www.mozilla.org/security/announce/mfsa2005-18.html  View
343999 66019 CVE-2005-0255 SUSE-SA:2005:016  View
344000 66019 CVE-2005-0255 SUSE-SA:2006:004  View
344001 66019 CVE-2005-0255 RHSA-2005:176  View
344002 66019 CVE-2005-0255 RHSA-2005:277  View
344003 66019 CVE-2005-0255 RHSA-2005:337  View
344004 66019 CVE-2005-0255 12659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61952 JVNDB-2005-000154 Mozilla 製品の nsTSubstring_CharT::Replace 関数におけるヒープ領域を破壊される脆弱性 ------------ CVE-2005-0255 11459 CVE-2005-0255 66019 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000154.html 2005-02-28 2007-04-01 View