← All CVEs

CVE-2005-2265

medium · 5

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.

5
CVSS
68.1%
EPSS (exploit prob.)
99th
EPSS percentile
2005-07-13
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
mozillafirefox0.8
mozillafirefox0.9
mozillafirefox0.9
mozillafirefox0.9.1
mozillafirefox0.9.2
mozillafirefox0.9.3
mozillafirefox0.10
mozillafirefox0.10.1
mozillafirefox1.0
mozillafirefox1.0.1
mozillafirefox1.0.2
mozillafirefox1.0.3
mozillafirefox1.0.4
mozillamozilla1.3
mozillamozilla1.4
mozillamozilla1.4
mozillamozilla1.4.1
mozillamozilla1.5
mozillamozilla1.5
mozillamozilla1.5
mozillamozilla1.5
mozillamozilla1.5.1
mozillamozilla1.6
mozillamozilla1.6
mozillamozilla1.6
mozillamozilla1.7
mozillamozilla1.7
mozillamozilla1.7
mozillamozilla1.7
mozillamozilla1.7
mozillamozilla1.7
mozillamozilla1.7.1
mozillamozilla1.7.2
mozillamozilla1.7.3
mozillamozilla1.7.5
mozillamozilla1.7.6
mozillamozilla1.7.7
mozillamozilla1.7.8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-2265