Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.
CVSS Details
- CVSS 3.1 Base Score: 5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade phoenixUpgrade mozillaUpgrade el-linux-mozillafirebirdUpgrade firefoxUpgrade mozilla-gtk1Upgrade mozilla-embeddedUpgrade fr-linux-netscapeUpgrade mozilla-thunderbirdUpgrade ja-linux-netscapeUpgrade fr-netscape7Upgrade pt_BR-netscape7Upgrade mozilla-firebirdUpgrade thunderbirdUpgrade mozilla-gtkUpgrade mozilla-gtk2Upgrade linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade zhCN-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade ja-netscape7Upgrade linux-mozillaUpgrade netscape7Upgrade linux-netscapeUpgrade ru-linux-mozillafirebirdUpgrade de-netscape7Upgrade linux-firefoxUpgrade de-linux-netscapeUpgrade zhTW-linux-mozillafirebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade linux-phoenixUpgrade mozilla+ipv6Upgrade linux-mozilla-devel | Dec 10, 2025 | Mar 24, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla. | Oct 30, 2017 | May 2, 2005 |
| Mfsa2005 30 | — | Upgrade to Mozilla Firefox version 1.0.2Upgrade to the latest version of Mozilla Firefox | Jul 28, 2005 | May 2, 2005 |
| Ubuntu | — | Upgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox | Nov 8, 2024 | May 2, 2005 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub