CVE-2005-4134: k-meleon_project k-meleon

CVSS: 5.0v2.0MediumModified

Published 09-12-2005Last modified 07-08-2024

Some data may be incomplete

2 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2005-4134 is a medium (CVSS 5.0) vulnerability in k-meleon_project k-meleon. EPSS estimates a 12.59% chance of exploitation in the next 30 days, higher than 96.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

12.59%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 4

DSA-1044-1 DSA-1046-1 DSA-1051-1 RHSA-2006:0200

Timeline

09-12-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

12.59%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 12.59% on 19-09-2026

19-09-202619-10-2026

EPSS score

12.59%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedosmultipleVerified
Mozilla Firefox 0.x/1.x - Large History File Buffer Overflow
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla2 products

firefox≤ 1.5
mozilla_suite≤ 1.7.12

K-meleon_project1 product

k-meleon≤ 0.9 | 0.7 | 0.7_service_pack_1 | 0.8 | 0.8.1 | 0.8.2

Netscape1 product

navigator≤ 8.0.40 | 7.1 | 7.2

3 vendors · 4 products

References

52 links

www.mandriva.com/security/advisories?name=MDKSA-2006:036Vendor AdvisoryX Refsource MANDRIVA
usn.ubuntu.com/275-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/19902Third Party AdvisoryX Refsource SECUNIA
www.osvdb.org/21533VDB EntryX Refsource OSVDB
www.mandriva.com/security/advisories?name=MDKSA-2006:037Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/17944Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/438730/100/0/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/19941Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17946Third Party AdvisoryX Refsource SECUNIAVendor Advisory
marc.info?l=full-disclosure&m=113405896025702&w=2Mailing ListX Refsource FULLDISC

Show all 52 references

www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.htmlVendor AdvisoryX Refsource FEDORA
www.gentoo.org/security/en/glsa/glsa-200604-12.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/21622Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19862Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19230Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18704Third Party AdvisoryX Refsource SECUNIA
www.networksecurity.fi/advisories/netscape-history.htmlX Refsource MISC
support.avaya.com/elmodocs2/security/ASA-2006-205.htmX Refsource CONFIRM
www.debian.org/security/2006/dsa-1051Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18709Third Party AdvisoryX Refsource SECUNIA
usn.ubuntu.com/271-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/18705Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200604-18.xmlVendor AdvisoryX Refsource GENTOO
www.securityfocus.com/bid/16476VDB EntryX Refsource BID
www.vupen.com/english/advisories/2006/0413VDB EntryX Refsource VUPEN
www.mozilla.org/security/announce/mfsa2006-03.htmlX Refsource CONFIRM
securitytracker.com/id?1015328VDB EntryX Refsource SECTRACK
secunia.com/advisories/19746Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21033Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18700Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/19759Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0200.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/18706Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17934Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/15773VDB EntryX Refsource BID
www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.htmlVendor AdvisoryX Refsource FEDORA
www.mozilla.org/security/history-title.htmlX Refsource MISC
www.redhat.com/support/errata/RHSA-2006-0199.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/19863Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/425978/100/0/threadedVendor AdvisoryX Refsource FEDORA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11382VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/18708Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2005/2805VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/425975/100/0/threadedVendor AdvisoryX Refsource FEDORA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1619VDB EntrySignatureX Refsource OVAL
marc.info?l=full-disclosure&m=113404911919629&w=2Mailing ListX Refsource FULLDISC
sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/19852Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/3391VDB EntryX Refsource VUPEN
www.debian.org/security/2006/dsa-1046Vendor AdvisoryX Refsource DEBIAN
www.debian.org/security/2006/dsa-1044Vendor AdvisoryX Refsource DEBIAN

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities