← back
CVE-2005-2265

CVE-2005-2265

EPSS 68.1%
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16306unverifiedexploitdbwww.exploit-db.com/exploits/9947unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.mozilla.org/show_bug.cgi?id=295854https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202http://secunia.com/advisories/16043http://secunia.com/advisories/16044http://secunia.com/advisories/16059http://secunia.com/advisories/19823https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100008https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10397https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A417https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A781http://www.ciac.org/ciac/bulletins/p-252.shtmlhttp://www.debian.org/security/2005/dsa-810