NetSight
IP …
medium5.0Public exploit code

CVE-2005-4134

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed appli…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.

Affected products

VendorProductAffected versions
K-Meleon ProjectK-Meleon
through 0.9
Versions 0.7, 0.7_service_pack_1, 0.8, 0.8.1, 0.8.2
MozillaFirefox
through 1.5
MozillaMozilla Suite
through 1.7.12
NetscapeNavigator
through 8.0.40
Versions 7.1, 7.2

References