FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-2701

This CVE name corresponds to:

Entered Topic
2005-09-23 firefox & mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2005-2701
Phase Assigned(20050826)

Description

Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/mfsa2005-58.html
DEBIAN DSA-868
DEBIAN DSA-838
DEBIAN DSA-866
FEDORA FLSA-2006:168375
MANDRIVA MDKSA-2005:169
MANDRIVA MDKSA-2005:170
MANDRIVA MDKSA-2005:174
REDHAT RHSA-2005:785
REDHAT RHSA-2005:789
SCO SCOSA-2005.49
SUSE SUSE-SA:2005:058
UBUNTU USN-200-1
BID 14916
BID 15495
OVAL oval:org.mitre.oval:def:9323
VUPEN ADV-2005-1824
OSVDB 19643
OVAL oval:org.mitre.oval:def:1480
SECTRACK 1014954
SECUNIA 16911
SECUNIA 16917
SECUNIA 17149
SECUNIA 17284
SECUNIA 17026
SECUNIA 17263
SECUNIA 16977
SECUNIA 17014
XF mozilla-xbm-bo(22373)