The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ja-mozillafirebird-gtk2Upgrade el-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade fr-linux-netscapeUpgrade fr-netscape7Upgrade mozilla-gtk2Upgrade linux-firefoxUpgrade mozilla-embeddedUpgrade linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade mozilla-firebirdUpgrade firefoxUpgrade mozilla-gtkUpgrade mozilla-gtk1Upgrade pt_BR-netscape7Upgrade phoenixUpgrade mozilla-thunderbirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade linux-mozilla-develUpgrade mozillaUpgrade linux-phoenixUpgrade de-linux-netscapeUpgrade linux-netscapeUpgrade mozilla+ipv6Upgrade ja-netscape7Upgrade netscape7Upgrade zhTW-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade linux-mozillaUpgrade de-netscape7Upgrade ru-linux-mozillafirebird | Dec 10, 2025 | Apr 16, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | May 2, 2005 |
| Mfsa2005 33 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 1.0.3 | Jul 28, 2005 | May 2, 2005 |
| Ubuntu | — | Upgrade mozilla-thunderbirdUpgrade mozilla-firefox-locale-jaUpgrade mozilla-firefox-locale-trUpgrade mozilla-firefoxUpgrade mozilla-firefox-locale-ukUpgrade mozilla-firefox-locale-nb | Nov 8, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub