CVE-2000-0655

Mozilla - Denial of Service

Title source: rule

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0655. PoCs published by Solar Designer.

AI-analyzed exploit summary The exploit describes a heap overflow vulnerability in Netscape Browsers due to improper handling of JPEG comment length fields. A malformed JPEG with a comment length of 1 can trigger an overflow, potentially leading to arbitrary code execution.

Description

Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Solar Designer · textdosmultiple

https://www.exploit-db.com/exploits/20098

View Code ZIP pw:eip

The exploit describes a heap overflow vulnerability in Netscape Browsers due to improper handling of JPEG comment length fields. A malformed JPEG with a comment length of 1 can trigger an overflow, potentially leading to arbitrary code execution.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Theoretical

Target: Netscape Browsers (versions using Independent JPEG Group's decoder library)

No auth needed

Prerequisites: Ability to deliver a malformed JPEG image to the target

MITRE ATT&CK

T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2000-046.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/1503

Various Sources vendor-advisory x_refsource_turbo

http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000016.html

Various Sources vendor-advisory x_refsource_freebsd

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc

Exploit, Patch, Vendor Advisory mailing-list x_refsource_bugtraq

http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D200007242356.DAA01274%40false.com

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/suse_security_announce_60.html

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-07/0456.html

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-08/0116.html

Vendor Advisory vendor-advisory x_refsource_netbsd

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-011.txt.asc

Scores

EPSS 0.1272

EPSS Percentile 95.8%

Details

Status published

Products (14)

mozilla/mozilla m15

netscape/communicator 4.0

netscape/communicator 4.05

netscape/communicator 4.5

netscape/communicator 4.5_beta

netscape/communicator 4.06

netscape/communicator 4.6

netscape/communicator 4.07

netscape/communicator 4.7

netscape/communicator 4.08

... and 4 more

Published Jul 25, 2000

Tracked Since Feb 18, 2026