Improper resource allocation - Buffer overflow In nss
Description
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:3.0.5-1.el5_2 | ||
rpm rhel5 | 0:4.7.3-2.el5 | ||
rpm rhel5 | 0:3.12.2.0-2.el5 | ||
rpm rhel5 | 0:2.0.0.19-1.el5_2 | ||
rpm rhel5 | 0:1.9.0.5-1.el5_2 |
Aliases
1. 2. 3.