Oval Definition:oval:org.mitre.oval:def:100043
Revision Date:2007-05-09Version:5
Title:Mozilla UTF8 to Unicode Conversion Heap Overflow
Description:Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-0592
Platform(s):Microsoft Windows 2000
Microsoft Windows NT
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):mozilla
Mozilla Firefox
Mozilla Thunderbird
Definition Synopsis
  • Mozilla Firefox version 1.0 or earlier is installed
  • Firefox version 1.0 or earlier is installed
  • AND Mozilla Firefox version 1.0 or earlier is installed
  • OR Mozilla Thunderbird version 1.0 or earlier is installed
  • Mozilla Thunderbird version 1.0 or earlier is installed
  • AND Mozilla Thunderbird version 1.0 or earlier is installed
  • OR Mozilla Suite version 1.7.5 or earlier is installed
  • Mozilla Suite version 1.7.5 or earlier is installed
  • AND Mozilla Suite version 1.7.5 or earlier is installed
  • BACK