The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade netscape7Upgrade ru-linux-mozillafirebirdUpgrade ja-linux-mozillafirebird-gtk1Upgrade de-linux-netscapeUpgrade linux-mozillafirebirdUpgrade el-linux-mozillafirebirdUpgrade linux-phoenixUpgrade firefoxUpgrade ja-mozillafirebird-gtk2Upgrade zhTW-linux-mozillafirebirdUpgrade zhCN-linux-mozillafirebirdUpgrade ja-netscape7Upgrade fr-linux-netscapeUpgrade ja-linux-netscapeUpgrade mozilla-gtk1Upgrade de-netscape7Upgrade linux-mozillaUpgrade phoenixUpgrade mozilla-thunderbirdUpgrade fr-netscape7Upgrade linux-mozilla-develUpgrade linux-firefoxUpgrade linux-netscapeUpgrade mozillaUpgrade de-linux-mozillafirebirdUpgrade mozilla-gtkUpgrade pt_BR-netscape7Upgrade mozilla-gtk2Upgrade mozilla-embeddedUpgrade mozilla-firebirdUpgrade mozilla+ipv6 | Dec 10, 2025 | Sep 23, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-bin.Upgrade net-libs/gecko-sdk. | Oct 30, 2017 | Sep 23, 2005 |
| Mfsa2005 58 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 1.0.7 | Sep 27, 2005 | Sep 23, 2005 |
| Suse | — | Upgrade mozilla-koUpgrade mozilla-mailUpgrade mozilla-develUpgrade mozilla-jaUpgrade mozilla-deatUpgrade mozilla-venkmanUpgrade mozilla-ircUpgrade mozilla-huUpgrade mozillaUpgrade mozilla-calendarUpgrade mozilla-dom-inspectorUpgrade mozilla-cs | Feb 17, 2015 | Sep 23, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub