CVE-2005-0399

medium · 5.1

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.

5.1

CVSS

15.1%

EPSS (exploit prob.)

97th

EPSS percentile

2005-05-02

Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
mozilla	firefox	0.8
mozilla	firefox	0.9
mozilla	firefox	0.9
mozilla	firefox	0.9.1
mozilla	firefox	0.9.2
mozilla	firefox	0.9.3
mozilla	firefox	0.10
mozilla	firefox	0.10.1
mozilla	firefox	1.0
mozilla	firefox	1.0.1
mozilla	mozilla	1.3
mozilla	mozilla	1.4
mozilla	mozilla	1.4
mozilla	mozilla	1.4.1
mozilla	mozilla	1.5
mozilla	mozilla	1.5
mozilla	mozilla	1.5
mozilla	mozilla	1.5
mozilla	mozilla	1.5.1
mozilla	mozilla	1.6
mozilla	mozilla	1.6
mozilla	mozilla	1.6
mozilla	mozilla	1.7
mozilla	mozilla	1.7
mozilla	mozilla	1.7
mozilla	mozilla	1.7
mozilla	mozilla	1.7
mozilla	mozilla	1.7
mozilla	mozilla	1.7.1
mozilla	mozilla	1.7.2
mozilla	mozilla	1.7.3
mozilla	mozilla	1.7.5
mozilla	thunderbird	0.1
mozilla	thunderbird	0.2
mozilla	thunderbird	0.3
mozilla	thunderbird	0.4
mozilla	thunderbird	0.5
mozilla	thunderbird	0.6
mozilla	thunderbird	0.7
mozilla	thunderbird	0.7.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-0399