CVE-2005-2704

Related Files

Debian Linux Security Advisory 866-1

Posted Oct 25, 2005

Authored by Debian | Site security.debian.org

Debian Security Advisory DSA 866-1 - Several security-related problems have been discovered in Mozilla and derived programs.

tags | advisory

systems | linux, debian

advisories | CVE-2005-2871, CVE-2005-2701, CVE-2005-2702, CVE-2005-2703, CVE-2005-2704, CVE-2005-2705, CVE-2005-2706, CVE-2005-2707, CVE-2005-2968

SHA-256 | 2701ccface00fab6d0fc16bc4aaa3111bf0eddb9408cdc76a4b8aa9b292a205c

Download | Favorite | View

Ubuntu Security Notice 200-1

Posted Oct 12, 2005

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice USN-200-1 - Multiple vulnerabilities exist in the mozilla-thunderbird package. A buffer overflow was discovered in the XBM image handler. By tricking an user into opening a specially crafted XBM image, an attacker could exploit this to execute arbitrary code with the user's privileges. Mats Palmgren discovered a buffer overflow in the Unicode string parser. Unicode strings that contained zero-width non-joiner characters caused a browser crash, which could possibly even exploited to execute arbitrary code with the user's privileges. Georgi Guninski reported an integer overflow in the JavaScript engine. This could be exploited to run arbitrary code under some conditions. Peter Zelezny discovered that URLs which are passed to Thunderbird on the command line are not correctly protected against interpretation by the shell. If Thunderbird is configured as the default handler for mailto: URLs, this could be exploited to execute arbitrary code with user privileges by tricking the user into clicking on a specially crafted URL (for example, in an email or chat client).

tags | advisory, overflow, arbitrary, shell, javascript, vulnerability

systems | linux, ubuntu

advisories | CVE-2005-2701, CVE-2005-2702, CVE-2005-2703, CVE-2005-2704, CVE-2005-2705, CVE-2005-2706, CVE-2005-2707, CVE-2005-2968

SHA-256 | afa1ecc22b6f13f656a48b0ca5d2d03a81c06c0f0835b22b94a65484ef17d759

Download | Favorite | View

Mandriva Linux Security Advisory 2005.169

Posted Sep 28, 2005

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Update Advisory - A number of vulnerabilities have been discovered in Mozilla Firefox that have been corrected in version 1.0.7

tags | advisory, vulnerability

systems | linux, mandriva

advisories | CVE-2005-2702, CVE-2005-2703, CVE-2005-2704, CVE-2005-2705, CVE-2005-2706, CVE-2005-2707, CVE-2005-2968

SHA-256 | bb0c0e56a300a55986048b2a72e10d74683868e9f32c036373319828bd7879e3

Download | Favorite | View