Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.
CVSS Details
- CVSS 3.1 Base Score: 5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade zhTW-linux-mozillafirebirdUpgrade linux-netscapeUpgrade linux-firefoxUpgrade de-linux-netscapeUpgrade mozilla+ipv6Upgrade ja-linux-mozillafirebird-gtk1Upgrade ru-linux-mozillafirebirdUpgrade linux-mozillaUpgrade netscape7Upgrade linux-mozilla-develUpgrade de-netscape7Upgrade linux-phoenixUpgrade mozilla-embeddedUpgrade ja-linux-netscapeUpgrade el-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade mozilla-thunderbirdUpgrade mozilla-gtkUpgrade mozillaUpgrade mozilla-gtk2Upgrade phoenixUpgrade ja-mozillafirebird-gtk2Upgrade firefoxUpgrade fr-linux-netscapeUpgrade thunderbirdUpgrade linux-mozillafirebirdUpgrade fr-netscape7Upgrade de-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade mozilla-firebirdUpgrade ja-netscape7Upgrade mozilla-gtk1 | Dec 10, 2025 | Mar 24, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla. | Oct 30, 2017 | May 2, 2005 |
| Mfsa2005 30 | — | Upgrade to Mozilla Firefox version 1.0.2Upgrade to the latest version of Mozilla Firefox | Jul 28, 2005 | May 2, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-trUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-uk | Nov 8, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub