The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mozilla-thunderbirdUpgrade mozilla-gtk1Upgrade linux-firefoxUpgrade mozilla-gtkUpgrade mozilla-firebirdUpgrade fr-netscape7Upgrade ja-linux-netscapeUpgrade linux-mozillafirebirdUpgrade mozilla-embeddedUpgrade de-linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade pt_BR-netscape7Upgrade mozilla-gtk2Upgrade el-linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade phoenixUpgrade firefoxUpgrade ja-linux-mozillafirebird-gtk1Upgrade linux-phoenixUpgrade zhCN-linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade de-netscape7Upgrade linux-mozillaUpgrade linux-mozilla-develUpgrade mozillaUpgrade mozilla+ipv6Upgrade ja-netscape7Upgrade ru-linux-mozillafirebirdUpgrade zhTW-linux-mozillafirebirdUpgrade netscape7Upgrade linux-netscape | Dec 10, 2025 | Apr 16, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | May 2, 2005 |
| Mfsa2005 33 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 1.0.3 | Jul 28, 2005 | May 2, 2005 |
| Ubuntu | — | Upgrade mozilla-thunderbirdUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefox-locale-nbUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-uk | Nov 8, 2024 | May 2, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub