CVE-2005-0399: mozilla firefox
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2005-0399 is a medium (CVSS 5.1) vulnerability in mozilla firefox. EPSS estimates a 15.12% chance of exploitation in the next 30 days, higher than 96.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 24-03-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
15.12%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 15.12% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mozilla3 products
- firefox0.8 | 0.9 | 0.9:rc | 0.9.1 | 0.9.2 | 0.9.3 | 0.10 | 0.10.1 | 1.0 | 1.0.1
- mozilla1.3 | 1.4 | 1.4:alpha | 1.4.1 | 1.5 | 1.5:alpha | 1.5:rc1 | 1.5:rc2 | 1.5.1 | 1.6 | 1.6:alpha | 1.6:beta | 1.7 | 1.7:alpha | 1.7:beta | 1.7:rc1 | 1.7:rc2 | 1.7:rc3 | 1.7.1 | 1.7.2 | 1.7.3 | 1.7.5
- thunderbird0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.7 | 0.7.1 | 0.7.2 | 0.7.3 | 0.8 | 0.9 | 1.0 | 1.0.1
1 vendor · 3 products
References
19 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028VDB EntrySignatureX Refsource OVAL
Show all 19 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377VDB EntrySignatureX Refsource OVAL