Mozilla Firefox Large History File Buffer Overflow Vulnerability
BID:15773
Info
Mozilla Firefox Large History File Buffer Overflow Vulnerability
| Bugtraq ID: | 15773 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-4134 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 08 2005 12:00AM |
| Updated: | Sep 10 2008 08:21PM |
| Credit: | Discovered by ZIPLOCK. |
| Vulnerable: |
Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun Solaris 10 Sun Java Desktop System (JDS) 2.0 SGI ProPack 3.0 SP6 Redhat Linux 9.0 i386 Redhat Linux 7.3 i686 Redhat Linux 7.3 i386 Redhat Linux 7.3 Redhat Fedora Core4 Redhat Fedora Core3 Redhat Fedora Core2 Redhat Fedora Core1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 IA64 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 IA64 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 IA64 Redhat Enterprise Linux AS 2.1 Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 Redhat Advanced Workstation for the Itanium Processor 2.1 Netscape Netscape 7.2 Netscape Navigator 7.2 Netscape Browser 8.0.4 Mozilla SeaMonkey 1.0 dev Mozilla Firefox 1.5 beta 2 Mozilla Firefox 1.5 beta 1 Mozilla Firefox 1.5 Mozilla Firefox 1.0.7 Mozilla Firefox 1.0.6 Mozilla Firefox 1.0.5 Mozilla Firefox 1.0.5 Mozilla Firefox 1.0.4 Mozilla Firefox 1.0.3 Mozilla Firefox 1.0.2 Mozilla Firefox 1.0.1 Mozilla Firefox 1.0 Mozilla Firefox 0.10.1 Mozilla Firefox 0.10 Mozilla Firefox 0.9.3 Mozilla Firefox 0.9.2 Mozilla Firefox 0.9.1 Mozilla Firefox 0.9 rc Mozilla Firefox 0.9 Mozilla Firefox 0.8 Mozilla Firefox Preview Release Mozilla Browser 1.8 Alpha 4 Mozilla Browser 1.8 Alpha 3 Mozilla Browser 1.8 Alpha 2 Mozilla Browser 1.8 Alpha 1 Mozilla Browser 1.7.12 Mozilla Browser 1.7.11 Mozilla Browser 1.7.10 Mozilla Browser 1.7.9 Mozilla Browser 1.7.8 Mozilla Browser 1.7.7 Mozilla Browser 1.7.6 Mozilla Browser 1.7.5 Mozilla Browser 1.7.4 Mozilla Browser 1.7.3 Mozilla Browser 1.7.2 Mozilla Browser 1.7.1 Mozilla Browser 1.7 rc3 Mozilla Browser 1.7 rc2 Mozilla Browser 1.7 rc1 Mozilla Browser 1.7 beta Mozilla Browser 1.7 alpha Mozilla Browser 1.7 Mozilla Browser 1.6 Mozilla Browser 1.5.1 Mozilla Browser 1.5 Mozilla Browser 1.4.4 Mozilla Browser 1.4.2 Mozilla Browser 1.4.1 Mozilla Browser 1.4 b Mozilla Browser 1.4 a Mozilla Browser 1.4 Mozilla Browser 1.3.1 Mozilla Browser 1.3 Mozilla Browser 1.2.1 Mozilla Browser 1.2 Beta Mozilla Browser 1.2 Alpha Mozilla Browser 1.2 Mozilla Browser 1.1 Beta Mozilla Browser 1.1 Alpha Mozilla Browser 1.1 Mozilla Browser 1.0.2 Mozilla Browser 1.0.1 Mozilla Browser 1.0 RC2 Mozilla Browser 1.0 RC1 Mozilla Browser 1.0 Mozilla Browser 0.9.48 Mozilla Browser 0.9.35 Mozilla Browser 0.9.9 Mozilla Browser 0.9.8 Mozilla Browser 0.9.7 Mozilla Browser 0.9.6 Mozilla Browser 0.9.5 Mozilla Browser 0.9.4 .1 Mozilla Browser 0.9.4 Mozilla Browser 0.9.3 Mozilla Browser 0.9.2 .1 Mozilla Browser 0.9.2 Mozilla Browser 0.8 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: |
Netscape Browser 8.1 Mozilla SeaMonkey 1.0 Mozilla Firefox 1.5.0.1 |
Discussion
Mozilla Firefox Large History File Buffer Overflow Vulnerability
Mozilla Firefox is reportedly prone to a remote denial-of-service vulnerability.
This issue presents itself when the browser handles a large entry in the 'history.dat' file. An attacker may trigger this issue by enticing a user to visit a malicious website and by supplying excessive data to be stored in the affected file.
This may cause a denial-of-service condition.
**UPDATE: Proof-of-concept exploit code has been published. The author of the code attributes the crash to a buffer-overflow condition. Symantec has not reproduced the alleged flaw.
Mozilla Firefox is reportedly prone to a remote denial-of-service vulnerability.
This issue presents itself when the browser handles a large entry in the 'history.dat' file. An attacker may trigger this issue by enticing a user to visit a malicious website and by supplying excessive data to be stored in the affected file.
This may cause a denial-of-service condition.
**UPDATE: Proof-of-concept exploit code has been published. The author of the code attributes the crash to a buffer-overflow condition. Symantec has not reproduced the alleged flaw.
Exploit / POC
Mozilla Firefox Large History File Buffer Overflow Vulnerability
Proof-of-concept code is available:
Proof-of-concept code is available:
Solution / Fix
Mozilla Firefox Large History File Buffer Overflow Vulnerability
Solution:
Please see the referenced vendor advisories for details on obtaining and applying fixes.
Sun Solaris 10.0
Mozilla SeaMonkey 1.0 dev
Mozilla Firefox 0.10.1
Mozilla Firefox 0.8
Mozilla Firefox 0.9
Mozilla Firefox 0.9 rc
Mozilla Firefox 1.0.1
Mozilla Firefox 1.0.2
Mozilla Firefox 1.0.4
Mozilla Firefox 1.0.5
Mozilla Firefox 1.0.5
Mozilla Firefox 1.0.7
Mozilla Browser 1.4.1
Mozilla Firefox 1.5 beta 2
Mozilla Browser 1.6
Netscape Netscape 7.2
Netscape Browser 8.0.4
Solution:
Please see the referenced vendor advisories for details on obtaining and applying fixes.
Sun Solaris 10.0
-
Sun 119115-19
Mozilla 1.7 for Solaris 10
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119115-19-1
Mozilla SeaMonkey 1.0 dev
-
Mozilla SeaMonkey 1.0
http://ftp.mozilla.org/pub/mozilla.org/seamonkey/releases/1.0/seamonke y-1.0.en-US.win32.installer.exe
Mozilla Firefox 0.10.1
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US -
RedHat firefox-1.0.7-1.3.fc3.legacy.i386.rpm
Fedora Core 3:
http://download.fedoralegacy.org/fedora/3/updates/i386/firefox-1.0.7-1 .3.fc3.legacy.i386.rpm -
RedHat firefox-1.0.7-1.3.fc3.legacy.x86_64.rpm
Fedora Core 3:
http://download.fedoralegacy.org/fedora/3/updates/x86_64/firefox-1.0.7 -1.3.fc3.legacy.x86_64.rpm
Mozilla Firefox 0.8
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Firefox 0.9
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Firefox 0.9 rc
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Firefox 1.0.1
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Firefox 1.0.2
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Firefox 1.0.4
-
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_alpha.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_amd64.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_arm.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_hppa.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_i386.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_ia64.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_m68k.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_mips.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_mipsel.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_powerpc.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_s390.deb -
Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_sparc.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_alpha.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_amd64.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_arm.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_hppa.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_i386.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_ia64.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_m68k.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_mips.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_mipsel.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_powerpc.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_s390.deb -
Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_sparc.deb -
Debian mozilla-firefox_1.0.4-2sarge6_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_alpha.deb -
Debian mozilla-firefox_1.0.4-2sarge6_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_amd64.deb -
Debian mozilla-firefox_1.0.4-2sarge6_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_arm.deb -
Debian mozilla-firefox_1.0.4-2sarge6_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_hppa.deb -
Debian mozilla-firefox_1.0.4-2sarge6_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_i386.deb -
Debian mozilla-firefox_1.0.4-2sarge6_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_ia64.deb -
Debian mozilla-firefox_1.0.4-2sarge6_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_m68k.deb -
Debian mozilla-firefox_1.0.4-2sarge6_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_mips.deb -
Debian mozilla-firefox_1.0.4-2sarge6_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_mipsel.deb -
Debian mozilla-firefox_1.0.4-2sarge6_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_powerpc.deb -
Debian mozilla-firefox_1.0.4-2sarge6_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_s390.deb -
Debian mozilla-firefox_1.0.4-2sarge6_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_sparc.deb -
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Firefox 1.0.5
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Firefox 1.0.5
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Firefox 1.0.7
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Browser 1.4.1
-
RedHat mozilla-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-1.7.12- 1.1.2.legacy.i386.rpm -
RedHat mozilla-chat-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-chat-1. 7.12-1.1.2.legacy.i386.rpm -
RedHat mozilla-devel-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-devel-1 .7.12-1.1.2.legacy.i386.rpm -
RedHat mozilla-dom-inspector-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-dom-ins pector-1.7.12-1.1.2.legacy.i386.rpm -
RedHat mozilla-js-debugger-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-js-debu gger-1.7.12-1.1.2.legacy.i386.rpm -
RedHat mozilla-mail-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-mail-1. 7.12-1.1.2.legacy.i386.rpm -
RedHat mozilla-nspr-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-1. 7.12-1.1.2.legacy.i386.rpm -
RedHat mozilla-nspr-devel-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-de vel-1.7.12-1.1.2.legacy.i386.rpm -
RedHat mozilla-nss-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-1.7 .12-1.1.2.legacy.i386.rpm -
RedHat mozilla-nss-devel-1.7.12-1.1.2.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-dev el-1.7.12-1.1.2.legacy.i386.rpm
Mozilla Firefox 1.5 beta 2
-
Mozilla Firefox 1.5.0.1
http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US
Mozilla Browser 1.6
-
RedHat mozilla-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-1.7.12- 1.2.3.legacy.i386.rpm -
RedHat mozilla-chat-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-chat-1. 7.12-1.2.3.legacy.i386.rpm -
RedHat mozilla-devel-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-devel-1 .7.12-1.2.3.legacy.i386.rpm -
RedHat mozilla-dom-inspector-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-dom-ins pector-1.7.12-1.2.3.legacy.i386.rpm -
RedHat mozilla-js-debugger-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-js-debu gger-1.7.12-1.2.3.legacy.i386.rpm -
RedHat mozilla-mail-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-mail-1. 7.12-1.2.3.legacy.i386.rpm -
RedHat mozilla-nspr-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nspr-1. 7.12-1.2.3.legacy.i386.rpm -
RedHat mozilla-nspr-devel-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nspr-de vel-1.7.12-1.2.3.legacy.i386.rpm -
RedHat mozilla-nss-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nss-1.7 .12-1.2.3.legacy.i386.rpm -
RedHat mozilla-nss-devel-1.7.12-1.2.3.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nss-dev el-1.7.12-1.2.3.legacy.i386.rpm
Netscape Netscape 7.2
-
Netscape Netscape 8.x Latest Download
http://browser.netscape.com/ns8/download/default.jsp
Netscape Browser 8.0.4
-
Netscape Netscape 8.x Latest Download
http://browser.netscape.com/ns8/download/default.jsp
References
Mozilla Firefox Large History File Buffer Overflow Vulnerability
References:
References:
- 102550 - Multiple Security Vulnerabilites in Mozilla 1.4 and 1.7 for Solaris and (Sun)
- Bugzilla Bug 319004 (Mozilla bugzilla)
- Mozilla Foundation Security Advisory 2006-03 - Long document title causes start (Mozilla)
- Mozilla Homepage (Mozilla Foundation)
- Netscape Homepage (Netscape)
- RHSA-2006:0199-10 - mozilla security update (RedHat)
- RHSA-2006:0200-8 - firefox security update (RedHat)
- Solution 228526: Multiple Security Vulnerabilites in Mozilla 1.4 and 1.7 for Sol (Sun)