Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade el-linux-mozillafirebirdUpgrade linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade ru-linux-mozillafirebirdUpgrade netscape7Upgrade ja-linux-mozillafirebird-gtk1Upgrade linux-phoenixUpgrade firefoxUpgrade mozilla-gtkUpgrade linux-netscapeUpgrade linux-firefoxUpgrade zhCN-linux-mozillafirebirdUpgrade de-linux-mozillafirebirdUpgrade linux-mozillaUpgrade zhTW-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade de-netscape7Upgrade ja-linux-netscapeUpgrade mozilla-gtk2Upgrade mozillaUpgrade mozilla-thunderbirdUpgrade mozilla-embeddedUpgrade mozilla-gtk1Upgrade mozilla-firebirdUpgrade ja-netscape7Upgrade fr-linux-netscapeUpgrade phoenixUpgrade ja-mozillafirebird-gtk2Upgrade linux-mozilla-develUpgrade fr-netscape7Upgrade mozilla+ipv6 | Dec 10, 2025 | Sep 23, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox.Upgrade net-libs/gecko-sdk.Upgrade www-client/mozilla-bin. | Oct 30, 2017 | Sep 23, 2005 |
| Mfsa2005 58 | — | Upgrade to Mozilla Firefox version 1.0.7Upgrade to the latest version of Mozilla Firefox | Sep 27, 2005 | Sep 23, 2005 |
| Suse | — | Upgrade mozilla-calendarUpgrade mozillaUpgrade mozilla-dom-inspectorUpgrade mozilla-csUpgrade mozilla-venkmanUpgrade mozilla-develUpgrade mozilla-jaUpgrade mozilla-huUpgrade mozilla-ircUpgrade mozilla-koUpgrade mozilla-mailUpgrade mozilla-deat | Feb 17, 2015 | Sep 23, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub