Mozilla Browser网络新闻传输协议远程堆溢出漏洞

漏洞信息详情

Mozilla Browser网络新闻传输协议远程堆溢出漏洞

• CNNVD编号：CNNVD-200412-124
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-1316
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2004-12-29
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  mozilla
• 漏洞来源：
  Disclosure of this…

用于Mozilla 1.7.3及其早期版本的nsNNTPProtocol.cpp的MSG_UnEscapeSearchUrl存在堆缓冲区溢出漏洞。远程攻击者可以借助一个带有trailing \’\’＼\’\’ (backslash)字符的NNTP URL (news：)导致服务拒绝（应用程序崩溃），防止字符串空终止。

The vendor has released an upgrade dealing with this issue.
Please see the referenced advisories for further information.
Mozilla Thunderbird 0.8

• SuSE MozillaThunderbird-0.8-5.5.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/MozillaThunderbir
  d-0.8-5.5.i586.rpm
• SuSE MozillaThunderbird-0.8-5.5.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/MozillaThunde
  rbird-0.8-5.5.x86_64.rpm

Mozilla Browser 1.0

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.0.1

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.0.2

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.1

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.2

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.2.1

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/
• Red Hat Fedora galeon-1.2.14-0.90.2.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/galeon-1.2.14-0
  .90.2.legacy.i386.rpm
• Red Hat Fedora mozilla-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-1.7.7-0
  .90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-chat-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-chat-1.
  7.7-0.90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-devel-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-devel-1
  .7.7-0.90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-dom-inspector-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-dom-ins
  pector-1.7.7-0.90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-js-debugger-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-js-debu
  gger-1.7.7-0.90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-mail-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-mail-1.
  7.7-0.90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-nspr-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nspr-1.
  7.7-0.90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-nspr-devel-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nspr-de
  vel-1.7.7-0.90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-nss-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nss-1.7
  .7-0.90.1.legacy.i386.rpm
• Red Hat Fedora mozilla-nss-devel-1.7.7-0.90.1.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nss-dev
  el-1.7.7-0.90.1.legacy.i386.rpm

Mozilla Browser 1.3

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.3.1

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.4 b

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.4

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.4 a

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/

Mozilla Browser 1.4.1

• Mozilla Mozilla 1.7.5
  
  http://www.mozilla.org/releases/
• Red Hat Fedora epiphany-1.0.8-1.fc1.2.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/epiphany-1.0.8-
  1.fc1.2.legacy.i386.rpm
• Red Hat Fedora mozilla-1.7.7-1.1.2.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-1.7.7-1
  .1.2.legacy.i386.rpm
• Red Hat Fedora mozilla-chat-1.7.7-1.1.2.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-chat-1.
  7.7-1.1.2.legacy.i386.rpm
• Red Hat Fedora mozilla-devel-1.7.7-1.1.2.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-devel-1
  .7.7-1.1.2.legacy.i386.rpm
• Red Hat Fedora mozilla-dom-inspector-1.7.7-1.1.2.legacy.i386.rpmRed Hat Fedora i386
  
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-dom-ins
  pector-1.7.7-1.1.2.legacy.i386.rpm
• Red Hat Fed

来源: www.mozilla.org
链接:http://www.mozilla.org/security/announce/mfsa2005-06.html

来源: XF
名称: mozilla-nntp-bo(18711)
链接:http://xforce.iss.net/xforce/xfdb/18711

来源: REDHAT
名称: RHSA-2005:038
链接:http://www.redhat.com/support/errata/RHSA-2005-038.html

来源: OVAL
名称: oval:org.mitre.oval:def:9808
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9808

来源: HP
名称: HPSBTU01114
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=110780717916478&w=2

来源: BUGTRAQ
名称: 20041229 Heap overflow in Mozilla Browser <= 1.7.3 NNTP code.
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=110436284718949&w=2

来源: isec.pl
链接:http://isec.pl/vulnerabilities/isec-0020-mozilla.txt

来源: BID
名称: 12131
链接:http://www.securityfocus.com/bid/12131

来源: SUSE
名称: SUSE-SA:2006:022
链接:http://www.novell.com/linux/security/advisories/2006_04_25.html

来源: SECUNIA
名称: 19823
链接:http://secunia.com/advisories/19823

来源: US Government Resource: oval:org.mitre.oval:def:100052
名称: oval:org.mitre.oval:def:100052
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100052