The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ja-mozillafirebird-gtk2Upgrade mozilla-embeddedUpgrade mozilla-thunderbirdUpgrade firefoxUpgrade mozilla-firebirdUpgrade zhCN-linux-mozillafirebirdUpgrade linux-mozillaUpgrade netscape7Upgrade linux-firefoxUpgrade zhTW-linux-mozillafirebirdUpgrade pt_BR-netscape7Upgrade mozilla-gtk1Upgrade mozilla-gtk2Upgrade ru-linux-mozillafirebirdUpgrade mozilla-gtkUpgrade de-linux-mozillafirebirdUpgrade de-linux-netscapeUpgrade phoenixUpgrade linux-phoenixUpgrade linux-mozilla-develUpgrade ja-netscape7Upgrade fr-linux-netscapeUpgrade ja-linux-netscapeUpgrade mozilla+ipv6Upgrade fr-netscape7Upgrade linux-netscapeUpgrade mozillaUpgrade el-linux-mozillafirebirdUpgrade linux-mozillafirebirdUpgrade de-netscape7Upgrade ja-linux-mozillafirebird-gtk1 | Dec 10, 2025 | Sep 10, 2005 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-bin.Upgrade net-libs/gecko-sdk.Upgrade www-client/mozilla. | Oct 30, 2017 | Sep 9, 2005 |
| Hpux | — | Apply the remediation from HP for CVE-2005-2871 | Aug 11, 2017 | Sep 9, 2005 |
| Mfsa2005 57 | — | Upgrade to Mozilla Firefox version 1.7.12 | Sep 29, 2005 | Sep 9, 2005 |
| Ubuntu | — | Upgrade mozilla-thunderbird | Nov 8, 2024 | Sep 9, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub