CVE-2005-0989

Mozilla Suite/Firefox/Netscape <1.7.6-1.0.2 - Info Disclosure

Title source: llm

Description

The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Daniel McNeil · textdoslinux

https://www.exploit-db.com/exploits/25334

View Code ZIP pw:eip

References (18)

Core 18

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100025

Patch, Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-386.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/12988

Various Sources vendor-advisory x_refsource_sco

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt

Exploit, Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/14820

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19823

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/15495

Exploit vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1013635

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-601.html

Patch, Vendor Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml

Exploit vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1013643

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11706

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-384.html

Patch, Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-383.html

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2006_04_25.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=288688

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/mfsa2005-33.html

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/14821

Scores

EPSS 0.2530

EPSS Percentile 96.2%

Details

Status published

Products (4)

mozilla/firefox 1.0.1

mozilla/firefox 1.0.2

mozilla/mozilla 1.7.6

netscape/navigator 7.2

Published May 02, 2005

Tracked Since Feb 18, 2026