CVE-2004-1614

Опубликовано: 18 окт. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme.

Ссылки

http://lcamtuf.coredump.cx/mangleme/gallery/
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=109811406620511&w=2
http://securitytracker.com/id?1011810
http://www.securityfocus.com/bid/11440
Exploit
Vendor Advisory
http://lcamtuf.coredump.cx/mangleme/gallery/
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=109811406620511&w=2
http://securitytracker.com/id?1011810
http://www.securityfocus.com/bid/11440
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.8:alpha2:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.0113

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-1614

debian

около 21 года назад

Mozilla allows remote attackers to cause a denial of service (applicat ...

GHSA-cfrm-mc6g-2q3f

github

больше 3 лет назад