ByteOS Network

CVE Vulnerability Details :

CVE-2005-2871

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-09 Sep, 2005 | 04:00

Updated At-07 Aug, 2024 | 22:53

▼CVE Numbering Authority (CNA)

Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.kb.cert.org/vuls/id/573857	third-party-advisory x_refsource_CERT-VN
http://www.debian.org/security/2005/dsa-868	vendor-advisory x_refsource_DEBIAN
http://www.vupen.com/english/advisories/2005/1824	vdb-entry x_refsource_VUPEN
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html	vendor-advisory x_refsource_FEDORA
http://www.vupen.com/english/advisories/2005/1690	vdb-entry x_refsource_VUPEN
http://securityreason.com/securityalert/83	third-party-advisory x_refsource_SREASON
http://secunia.com/advisories/16767	third-party-advisory x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1287	vdb-entry signature x_refsource_OVAL
http://www.vupen.com/english/advisories/2005/1691	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/16764	third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2005/dsa-837	vendor-advisory x_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A584	vdb-entry signature x_refsource_OVAL
http://www.ubuntu.com/usn/usn-181-1	vendor-advisory x_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2005-791.html	vendor-advisory x_refsource_REDHAT
http://secunia.com/advisories/17042	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/14784	vdb-entry x_refsource_BID
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9608	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/16766	third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2005/dsa-866	vendor-advisory x_refsource_DEBIAN
http://www.security-protocols.com/advisory/sp-x17-advisory.txt	x_refsource_MISC
http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0316.html	mailing-list x_refsource_FULLDISC
http://www.redhat.com/support/errata/RHSA-2005-769.html	vendor-advisory x_refsource_REDHAT
http://securitytracker.com/id?1014877	vdb-entry x_refsource_SECTRACK
http://www.mozilla.org/security/announce/mfsa2005-57.html	x_refsource_CONFIRM
http://www.securiteam.com/securitynews/5RP0B0UGVW.html	x_refsource_MISC
http://secunia.com/advisories/17284	third-party-advisory x_refsource_SECUNIA
http://www.osvdb.org/19255	vdb-entry x_refsource_OSVDB
http://secunia.com/advisories/17263	third-party-advisory x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2005-768.html	vendor-advisory x_refsource_REDHAT
http://www.ciac.org/ciac/bulletins/p-303.shtml	third-party-advisory government-resource x_refsource_CIAC
http://www.gentoo.org/security/en/glsa/glsa-200509-11.xml	vendor-advisory x_refsource_GENTOO
http://www.security-protocols.com/firefox-death.html	x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=307259	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDKSA-2005:174	vendor-advisory x_refsource_MANDRIVA
http://secunia.com/advisories/17090	third-party-advisory x_refsource_SECUNIA
http://marc.info/?l=full-disclosure&m=112624614008387&w=2	mailing-list x_refsource_FULLDISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/22207	vdb-entry x_refsource_XF

Hyperlink: http://www.kb.cert.org/vuls/id/573857

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://www.debian.org/security/2005/dsa-868

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.vupen.com/english/advisories/2005/1824

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.vupen.com/english/advisories/2005/1690

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://securityreason.com/securityalert/83

Resource:

third-party-advisory

x_refsource_SREASON

Hyperlink: http://secunia.com/advisories/16767

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1287

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.vupen.com/english/advisories/2005/1691

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/16764

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.debian.org/security/2005/dsa-837

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A584

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.ubuntu.com/usn/usn-181-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.redhat.com/support/errata/RHSA-2005-791.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://secunia.com/advisories/17042

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/14784

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9608

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/16766

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.debian.org/security/2005/dsa-866

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.security-protocols.com/advisory/sp-x17-advisory.txt

Resource:

x_refsource_MISC

Hyperlink: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0316.html

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: http://www.redhat.com/support/errata/RHSA-2005-769.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://securitytracker.com/id?1014877

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.mozilla.org/security/announce/mfsa2005-57.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securiteam.com/securitynews/5RP0B0UGVW.html

Resource:

x_refsource_MISC

Hyperlink: http://secunia.com/advisories/17284

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.osvdb.org/19255

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://secunia.com/advisories/17263

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2005-768.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.ciac.org/ciac/bulletins/p-303.shtml

Resource:

third-party-advisory

government-resource

x_refsource_CIAC

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200509-11.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.security-protocols.com/firefox-death.html

Resource:

x_refsource_MISC

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=307259

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2005:174

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://secunia.com/advisories/17090

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://marc.info/?l=full-disclosure&m=112624614008387&w=2

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/22207

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.kb.cert.org/vuls/id/573857	third-party-advisory x_refsource_CERT-VN x_transferred
http://www.debian.org/security/2005/dsa-868	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.vupen.com/english/advisories/2005/1824	vdb-entry x_refsource_VUPEN x_transferred
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.vupen.com/english/advisories/2005/1690	vdb-entry x_refsource_VUPEN x_transferred
http://securityreason.com/securityalert/83	third-party-advisory x_refsource_SREASON x_transferred
http://secunia.com/advisories/16767	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1287	vdb-entry signature x_refsource_OVAL x_transferred
http://www.vupen.com/english/advisories/2005/1691	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/16764	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.debian.org/security/2005/dsa-837	vendor-advisory x_refsource_DEBIAN x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A584	vdb-entry signature x_refsource_OVAL x_transferred
http://www.ubuntu.com/usn/usn-181-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.redhat.com/support/errata/RHSA-2005-791.html	vendor-advisory x_refsource_REDHAT x_transferred
http://secunia.com/advisories/17042	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/14784	vdb-entry x_refsource_BID x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9608	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/16766	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.debian.org/security/2005/dsa-866	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.security-protocols.com/advisory/sp-x17-advisory.txt	x_refsource_MISC x_transferred
http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0316.html	mailing-list x_refsource_FULLDISC x_transferred
http://www.redhat.com/support/errata/RHSA-2005-769.html	vendor-advisory x_refsource_REDHAT x_transferred
http://securitytracker.com/id?1014877	vdb-entry x_refsource_SECTRACK x_transferred
http://www.mozilla.org/security/announce/mfsa2005-57.html	x_refsource_CONFIRM x_transferred
http://www.securiteam.com/securitynews/5RP0B0UGVW.html	x_refsource_MISC x_transferred
http://secunia.com/advisories/17284	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.osvdb.org/19255	vdb-entry x_refsource_OSVDB x_transferred
http://secunia.com/advisories/17263	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.redhat.com/support/errata/RHSA-2005-768.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.ciac.org/ciac/bulletins/p-303.shtml	third-party-advisory government-resource x_refsource_CIAC x_transferred
http://www.gentoo.org/security/en/glsa/glsa-200509-11.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.security-protocols.com/firefox-death.html	x_refsource_MISC x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=307259	x_refsource_CONFIRM x_transferred
http://www.mandriva.com/security/advisories?name=MDKSA-2005:174	vendor-advisory x_refsource_MANDRIVA x_transferred
http://secunia.com/advisories/17090	third-party-advisory x_refsource_SECUNIA x_transferred
http://marc.info/?l=full-disclosure&m=112624614008387&w=2	mailing-list x_refsource_FULLDISC x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/22207	vdb-entry x_refsource_XF x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/573857

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://www.debian.org/security/2005/dsa-868

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2005/1824

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2005/1690

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://securityreason.com/securityalert/83

Resource:

third-party-advisory

x_refsource_SREASON

x_transferred

Hyperlink: http://secunia.com/advisories/16767

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1287

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2005/1691

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/16764

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.debian.org/security/2005/dsa-837

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A584

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.ubuntu.com/usn/usn-181-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2005-791.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://secunia.com/advisories/17042

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/14784

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9608

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://secunia.com/advisories/16766

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.debian.org/security/2005/dsa-866

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://www.security-protocols.com/advisory/sp-x17-advisory.txt

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0316.html

Resource:

mailing-list

x_refsource_FULLDISC

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2005-769.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://securitytracker.com/id?1014877

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.mozilla.org/security/announce/mfsa2005-57.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securiteam.com/securitynews/5RP0B0UGVW.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://secunia.com/advisories/17284

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.osvdb.org/19255

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://secunia.com/advisories/17263

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2005-768.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.ciac.org/ciac/bulletins/p-303.shtml

Resource:

third-party-advisory

government-resource

x_refsource_CIAC

x_transferred

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200509-11.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.security-protocols.com/firefox-death.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=307259

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2005:174

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://secunia.com/advisories/17090

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://marc.info/?l=full-disclosure&m=112624614008387&w=2

Resource:

mailing-list

x_refsource_FULLDISC

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/22207

Resource:

vdb-entry

x_refsource_XF

x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References