Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.

An updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

A bug was found in the way Thunderbird processes certain international domain names. An attacker could create a specially crafted HTML mail, which when viewed by the victim would cause Thunderbird to crash or possibly execute arbitrary code. Thunderbird as shipped with Red Hat Enterprise Linux 4 must have international domain names enabled by the user in order to be vulnerable to this issue. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

A bug was found in the way Thunderbird processes certain Unicode sequences. It may be possible to execute arbitrary code as the user running Thunderbird if the user views a specially crafted HTML mail containing Unicode sequences. (CVE-2005-2702)

A bug was found in the way Thunderbird makes XMLHttp requests. It is possible that a malicious HTML mail could leverage this flaw to exploit other proxy or server flaws from the victim's machine. It is also possible that this flaw could be leveraged to send XMLHttp requests to hosts other than the originator; the default behavior of Thunderbird is to disallow such actions. (CVE-2005-2703)

A bug was found in the way Thunderbird implemented its XBL interface.
It may be possible for a malicious HTML mail to create an XBL binding in such a way that would allow arbitrary JavaScript execution with chrome permissions. Please note that in Thunderbird 1.0.6 this issue is not directly exploitable and will need to leverage other unknown exploits. (CVE-2005-2704)

An integer overflow bug was found in Thunderbird's JavaScript engine.
Under favorable conditions, it may be possible for a malicious mail message to execute arbitrary code as the user running Thunderbird.
Please note that JavaScript support is disabled by default in Thunderbird. (CVE-2005-2705)

A bug was found in the way Thunderbird displays about: pages. It is possible for a malicious HTML mail to open an about: page, such as about:mozilla, in such a way that it becomes possible to execute JavaScript with chrome privileges. (CVE-2005-2706)

A bug was found in the way Thunderbird opens new windows. It is possible for a malicious HTML mail to construct a new window without any user interface components, such as the address bar and the status bar. This window could then be used to mislead the user for malicious purposes. (CVE-2005-2707)

A bug was found in the way Thunderbird processes URLs passed to it on the command line. If a user passes a malformed URL to Thunderbird, such as clicking on a link in an instant messaging program, it is possible to execute arbitrary commands as the user running Thunderbird. (CVE-2005-2968)

Users of Thunderbird are advised to upgrade to this updated package, which contains Thunderbird version 1.0.7 and is not vulnerable to these issues.

An updated firefox package that fixes as security bug is now available for Red Hat Enterprise Linux 4.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Mozilla Firefox is an open source Web browser.

A bug was found in the way Firefox processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Firefox to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

Users of Firefox are advised to upgrade to this updated package that contains a backported patch and is not vulnerable to this issue.

An updated mozilla package that fixes a security bug is now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor.

A bug was found in the way Mozilla processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Mozilla to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

Users of Mozilla are advised to upgrade to this updated package that contains a backported patch and is not vulnerable to this issue.

Tom Ferris reports :

A buffer overflow vulnerability exists within Firefox version 1.0.6 and all other prior versions which allows for an attacker to remotely execute arbitrary code on an affected host.

The problem seems to be when a hostname which has all dashes causes the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec to return true, but is sets encHost to an empty string. Meaning, Firefox appends 0 to approxLen and then appends the long string of dashes to the buffer instead.

Note: It is possible to disable IDN support as a workaround to protect against this buffer overflow. How to do this is described on the What Firefox and Mozilla users should know about the IDN buffer overflow security issue web page.

Tom Ferris discovered a buffer overflow in the Mozilla products (Mozilla browser, Firefox, Thunderbird). By tricking an user to click on a Hyperlink with a specially crafted destination URL, a remote attacker could crash the application. It might even be possible to exploit this vulnerability to execute arbitrary code, but this has not yet been confirmed.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated Mozilla Thunderbird packages fix various vulnerabilities :

The run-mozilla.sh script, with debugging enabled, would allow local users to create or overwrite arbitrary files via a symlink attack on temporary files (CVE-2005-2353).

A bug in the way Thunderbird processes XBM images could be used to execute arbitrary code via a specially crafted XBM image file (CVE-2005-2701).

A bug in the way Thunderbird handles certain Unicode sequences could be used to execute arbitrary code via viewing a specially crafted Unicode sequence (CVE-2005-2702).

A bug in the way Thunderbird makes XMLHttp requests could be abused by a malicious web page to exploit other proxy or server flaws from the victim's machine; however, the default behaviour of the browser is to disallow this (CVE-2005-2703).

A bug in the way Thunderbird implemented its XBL interface could be abused by a malicious web page to create an XBL binding in such a way as to allow arbitrary JavaScript execution with chrome permissions (CVE-2005-2704).

An integer overflow in Thunderbird's JavaScript engine could be manipulated in certain conditions to allow a malicious web page to execute arbitrary code (CVE-2005-2705).

A bug in the way Thunderbird displays about: pages could be used to execute JavaScript with chrome privileges (CVE-2005-2706).

A bug in the way Thunderbird opens new windows could be used by a malicious web page to construct a new window without any user interface elements (such as address bar and status bar) that could be used to potentially mislead the user (CVE-2005-2707).

A bug in the way Thunderbird proceesed URLs on the command line could be used to execute arbitary commands as the user running Thunderbird;
this could be abused by clicking on a supplied link, such as from an instant messaging client (CVE-2005-2968).

Tom Ferris reported that Thunderbird would crash when processing a domain name consisting solely of soft-hyphen characters due to a heap overflow when IDN processing results in an empty string after removing non-wrapping chracters, such as soft-hyphens. This could be exploited to run or or install malware on the user's computer (CVE-2005-2871).

The updated packages have been patched to correct these issues.

Several security-related problems have been discovered in Mozilla and derived programs. Some of the following problems don't exactly apply to Mozilla Thunderbird, even though the code is present. In order to keep the codebase in sync with upstream it has been altered nevertheless. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CAN-2005-2871     Tom Ferris discovered a bug in the IDN hostname handling     of Mozilla that allows remote attackers to cause a     denial of service and possibly execute arbitrary code     via a hostname with dashes.

  - CAN-2005-2701

    A buffer overflow allows remote attackers to execute     arbitrary code via an XBM image file that ends in a     large number of spaces instead of the expected end tag.

  - CAN-2005-2702

    Mats Palmgren discovered a buffer overflow in the     Unicode string parser that allows a specially crafted     Unicode sequence to overflow a buffer and cause     arbitrary code to be executed.

  - CAN-2005-2703

    Remote attackers could spoof HTTP headers of XML HTTP     requests via XMLHttpRequest and possibly use the client     to exploit vulnerabilities in servers or proxies.

  - CAN-2005-2704

    Remote attackers could spoof DOM objects via an XBL     control that implements an internal XPCOM interface.

  - CAN-2005-2705

    Georgi Guninski discovered an integer overflow in the     JavaScript engine that might allow remote attackers to     execute arbitrary code.

  - CAN-2005-2706

    Remote attackers could execute JavaScript code with     chrome privileges via an about: page such as     about:mozilla.

  - CAN-2005-2707

    Remote attackers could spawn windows without user     interface components such as the address and status bar     that could be used to conduct spoofing or phishing     attacks.

  - CAN-2005-2968

    Peter Zelezny discovered that shell metacharacters are     not properly escaped when they are passed to a shell     script and allow the execution of arbitrary commands,     e.g. when a malicious URL is automatically copied from     another program into Mozilla as default browser.

Several security-related problems have been discovered in Mozilla and derived programs. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CAN-2005-2871     Tom Ferris discovered a bug in the IDN hostname handling     of Mozilla that allows remote attackers to cause a     denial of service and possibly execute arbitrary code     via a hostname with dashes.

  - CAN-2005-2701

    A buffer overflow allows remote attackers to execute     arbitrary code via an XBM image file that ends in a     large number of spaces instead of the expected end tag.

  - CAN-2005-2702

    Mats Palmgren discovered a buffer overflow in the     Unicode string parser that allows a specially crafted     Unicode sequence to overflow a buffer and cause     arbitrary code to be executed.

  - CAN-2005-2703

    Remote attackers could spoof HTTP headers of XML HTTP     requests via XMLHttpRequest and possibly use the client     to exploit vulnerabilities in servers or proxies.

  - CAN-2005-2704

    Remote attackers could spoof DOM objects via an XBL     control that implements an internal XPCOM interface.

  - CAN-2005-2705

    Georgi Guninski discovered an integer overflow in the     JavaScript engine that might allow remote attackers to     execute arbitrary code.

  - CAN-2005-2706

    Remote attackers could execute JavaScript code with     chrome privileges via an about: page such as     about:mozilla.

  - CAN-2005-2707

    Remote attackers could spawn windows without user     interface components such as the address and status bar     that could be used to conduct spoofing or phishing     attacks.

  - CAN-2005-2968

    Peter Zelezny discovered that shell metacharacters are     not properly escaped when they are passed to a shell     script and allow the execution of arbitrary commands,     e.g. when a malicious URL is automatically copied from     another program into Mozilla as default browser.

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:791 advisory.

  - security flaw (CVE-2005-2702, CVE-2005-2703, CVE-2005-2704, CVE-2005-2705, CVE-2005-2706, CVE-2005-2707,     CVE-2005-2871, CVE-2005-2968)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A number of vulnerabilities have been discovered in Mozilla that have been corrected in version 1.7.12 :

A bug in the way Mozilla processes XBM images could be used to execute arbitrary code via a specially crafted XBM image file (CVE-2005-2701).

A bug in the way Mozilla handles certain Unicode sequences could be used to execute arbitrary code via viewing a specially crafted Unicode sequence (CVE-2005-2702).

A bug in the way Mozilla makes XMLHttp requests could be abused by a malicious web page to exploit other proxy or server flaws from the victim's machine; however, the default behaviour of the browser is to disallow this (CVE-2005-2703).

A bug in the way Mozilla implemented its XBL interface could be abused by a malicious web page to create an XBL binding in such a way as to allow arbitrary JavaScript execution with chrome permissions (CVE-2005-2704).

An integer overflow in Mozilla's JavaScript engine could be manipulated in certain conditions to allow a malicious web page to execute arbitrary code (CVE-2005-2705).

A bug in the way Mozilla displays about: pages could be used to execute JavaScript with chrome privileges (CVE-2005-2706).

A bug in the way Mozilla opens new windows could be used by a malicious web page to construct a new window without any user interface elements (such as address bar and status bar) that could be used to potentially mislead the user (CVE-2005-2707).

Tom Ferris reported that Firefox would crash when processing a domain name consisting solely of soft-hyphen characters due to a heap overflow when IDN processing results in an empty string after removing non- wrapping chracters, such as soft-hyphens. This could be exploited to run or or install malware on the user's computer (CVE-2005-2871).

The updated packages have been patched to address these issues and all users are urged to upgrade immediately.

An updated thunderbird package that fixes various bugs is now available for Fedora Core 4.

This update has been rated as having important security impact by the Fedora Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

A bug was found in the way Thunderbird processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Thunderbird to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

A bug was found in the way Thunderbird processes certain Unicode sequences. It may be possible to execute arbitrary code as the user running Thunderbird if the user views a specially crafted Unicode sequence. (CVE-2005-2702)

A bug was found in the way Thunderbird makes XMLHttp requests. It is possible that a malicious web page could leverage this flaw to exploit other proxy or server flaws from the victim's machine. It is also possible that this flaw could be leveraged to send XMLHttp requests to hosts other than the originator; the default behavior of the browser is to disallow this. (CVE-2005-2703)

A bug was found in the way Thunderbird implemented its XBL interface.
It may be possible for a malicious web page to create an XBL binding in such a way that would allow arbitrary JavaScript execution with chrome permissions. Please note that in Thunderbird 1.0.6 this issue is not directly exploitable and will need to leverage other unknown exploits. (CVE-2005-2704)

An integer overflow bug was found in Thunderbird's JavaScript engine.
Under favorable conditions, it may be possible for a malicious mail message to execute arbitrary code as the user running Thunderbird.
Please note that JavaScript support is disabled by default in Thunderbird. (CVE-2005-2705)

A bug was found in the way Thunderbird displays about: pages. It is possible for a malicious web page to open an about: page, such as about:mozilla, in such a way that it becomes possible to execute JavaScript with chrome privileges. (CVE-2005-2706)

A bug was found in the way Thunderbird opens new windows. It is possible for a malicious website to construct a new window without any user interface components, such as the address bar and the status bar.
This window could then be used to mislead the user for malicious purposes. (CVE-2005-2707)

A bug was found in the way Thunderbird processes URLs passed to it on the command line. If a user passes a malformed URL to Thunderbird, such as clicking on a link in an instant messaging program, it is possible to execute arbitrary commands as the user running Thunderbird. (CVE-2005-2968) 

Users of Thunderbird are advised to upgrade to this updated package that contains Thunderbird version 1.0.7 and is not vulnerable to these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An updated thunderbird package that fixes various bugs is now available for Fedora Core 3.

This update has been rated as having important security impact by the Fedora Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

A bug was found in the way Thunderbird processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Thunderbird to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

A bug was found in the way Thunderbird processes certain Unicode sequences. It may be possible to execute arbitrary code as the user running Thunderbird if the user views a specially crafted Unicode sequence. (CVE-2005-2702)

A bug was found in the way Thunderbird makes XMLHttp requests. It is possible that a malicious web page could leverage this flaw to exploit other proxy or server flaws from the victim's machine. It is also possible that this flaw could be leveraged to send XMLHttp requests to hosts other than the originator; the default behavior of the browser is to disallow this. (CVE-2005-2703)

A bug was found in the way Thunderbird implemented its XBL interface.
It may be possible for a malicious web page to create an XBL binding in such a way that would allow arbitrary JavaScript execution with chrome permissions. Please note that in Thunderbird 1.0.6 this issue is not directly exploitable and will need to leverage other unknown exploits. (CVE-2005-2704)

An integer overflow bug was found in Thunderbird's JavaScript engine.
Under favorable conditions, it may be possible for a malicious mail message to execute arbitrary code as the user running Thunderbird.
Please note that JavaScript support is disabled by default in Thunderbird. (CVE-2005-2705)

A bug was found in the way Thunderbird displays about: pages. It is possible for a malicious web page to open an about: page, such as about:mozilla, in such a way that it becomes possible to execute JavaScript with chrome privileges. (CVE-2005-2706)

A bug was found in the way Thunderbird opens new windows. It is possible for a malicious website to construct a new window without any user interface components, such as the address bar and the status bar.
This window could then be used to mislead the user for malicious purposes. (CVE-2005-2707)

A bug was found in the way Thunderbird processes URLs passed to it on the command line. If a user passes a malformed URL to Thunderbird, such as clicking on a link in an instant messaging program, it is possible to execute arbitrary commands as the user running Thunderbird. (CVE-2005-2968) 

Users of Thunderbird are advised to upgrade to this updated package that contains Thunderbird version 1.0.7 and is not vulnerable to these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200509-11 (Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities)

    The Mozilla Suite and Firefox are both vulnerable to the following     issues:
    Tom Ferris reported a heap overflow in IDN-enabled browsers with     malicious Host: headers (CAN-2005-2871).
    'jackerror' discovered a heap overrun in XBM image processing     (CAN-2005-2701).
    Mats Palmgren reported a potentially exploitable stack corruption     using specific Unicode sequences (CAN-2005-2702).
    Georgi Guninski discovered an integer overflow in the JavaScript     engine (CAN-2005-2705)     Other issues ranging from DOM object spoofing to request header     spoofing were also found and fixed in the latest versions     (CAN-2005-2703, CAN-2005-2704, CAN-2005-2706, CAN-2005-2707).
    The Gecko engine in itself is also affected by some of these issues and     has been updated as well.
  Impact :

    A remote attacker could setup a malicious site and entice a victim to     visit it, potentially resulting in arbitrary code execution with the     victim's privileges or facilitated spoofing of known websites.
  Workaround :

    There is no known workaround for all the issues.

Tom Ferris discovered a bug in the IDN hostname handling of Mozilla Firefox, which is also present in the other browsers from the same family that allows remote attackers to cause a denial of service and possibly execute arbitrary code via a hostname with dashes.

Versions of Mozilla Firefox prior to 1.0.7 are known to contain various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host. 

Versions of Mozilla Firefox prior to 1.7.12 are affected by various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host.

An updated mozilla package that fixes a security bug is now available for Fedora Core 3.

This update has been rated as having critical security impact by the Fedora Security Response Team.

Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor.

A bug was found in the way Mozilla processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Mozilla to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

Users of Mozilla are advised to upgrade to this updated package that contains a backported patch and is not vulnerable to this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An updated mozilla package that fixes a security bug is now available for Fedora Core 4.

This update has been rated as having critical security impact by the Fedora Security Response Team.

Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor.

A bug was found in the way Mozilla processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Mozilla to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

Users of Mozilla are advised to upgrade to this updated package that contains a backported patch and is not vulnerable to this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An updated firefox package that fixes as security bug is now available for Fedora Core 3 and Fedora Core 4.

This update has been rated as having critical security impact by the Fedora Security Response Team.

Mozilla Firefox is an open source Web browser.

A bug was found in the way Firefox processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Firefox to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

Users of Firefox are advised to upgrade to this updated package that contains a backported patch and is not vulnerable to this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An updated firefox package that fixes as security bug is now available for Fedora Core 4.

This update has been rated as having critical security impact by the Fedora Security Response Team.

Mozilla Firefox is an open source Web browser.

A bug was found in the way Firefox processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Firefox to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.

Users of Firefox are advised to upgrade to this updated package that contains a backported patch and is not vulnerable to this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is using Firefox, an alternative web browser. 

The installed version of Firefox contains various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host.

The remote host is using Mozilla Thunderbird, an email client. 

The remote version of this software contains various security issues that could allow an attacker to execute arbitrary code on the remote host and to disguise URLs.

The remote host is using Mozilla, an alternative web browser. The installed version of Mozilla contains various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host.

The remote host is using Firefox. The installed version of Firefox contains various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host.

ID	Name	Product	Family	Severity
21964	CentOS 4 : thunderbird (CESA-2005:791)	Nessus	CentOS Local Security Checks	high
21962	CentOS 4 : firefox (CESA-2005:768)	Nessus	CentOS Local Security Checks	high
21856	CentOS 3 / 4 : mozilla (CESA-2005:769)	Nessus	CentOS Local Security Checks	high
21463	FreeBSD : firefox & mozilla -- buffer overflow vulnerability (8665ebb9-2237-11da-978e-0001020eed82)	Nessus	FreeBSD Local Security Checks	high
20592	Ubuntu 4.10 / 5.04 : mozilla, mozilla-thunderbird, mozilla-firefox vulnerabilities (USN-181-1)	Nessus	Ubuntu Local Security Checks	high
20428	Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2005:174)	Nessus	Mandriva Local Security Checks	high
20071	Debian DSA-868-1 : mozilla-thunderbird - several vulnerabilities	Nessus	Debian Local Security Checks	high
20063	Debian DSA-866-1 : mozilla - several vulnerabilities	Nessus	Debian Local Security Checks	high
19995	RHEL 4 : thunderbird (RHSA-2005:791)	Nessus	Red Hat Local Security Checks	critical
19923	Mandrake Linux Security Advisory : mozilla (MDKSA-2005:170)	Nessus	Mandriva Local Security Checks	high
19884	Fedora Core 4 : thunderbird-1.0.7-1.1.fc4 (2005-963)	Nessus	Fedora Local Security Checks	high
19883	Fedora Core 3 : thunderbird-1.0.7-1.1.fc3 (2005-962)	Nessus	Fedora Local Security Checks	high
19810	GLSA-200509-11 : Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
19806	Debian DSA-837-1 : mozilla-firefox - buffer overflow	Nessus	Debian Local Security Checks	high
3239	Mozilla Firefox < 1.0.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
3238	Mozilla Firefox < 1.7.12 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
19736	Fedora Core 3 : mozilla-1.7.10-1.3.2 (2005-874)	Nessus	Fedora Local Security Checks	high
19735	Fedora Core 4 : mozilla-1.7.10-1.5.2 (2005-873)	Nessus	Fedora Local Security Checks	high
19734	Fedora Core 3 : firefox-1.0.6-1.2.fc3 (2005-872)	Nessus	Fedora Local Security Checks	high
19733	Fedora Core 4 : firefox-1.0.6-1.2.fc4 (2005-871)	Nessus	Fedora Local Security Checks	high
19719	Firefox < 1.0.7 Multiple Vulnerabilities	Nessus	Windows	high
19694	Mozilla Thunderbird < 1.0.7 IDN URL Domain Name Overflow	Nessus	Windows	high
19677	RHEL 2.1 / 3 / 4 : mozilla (RHSA-2005:769)	Nessus	Red Hat Local Security Checks	high
19676	RHEL 4 : firefox (RHSA-2005:768)	Nessus	Red Hat Local Security Checks	high
801294	Mozilla Browser < 1.7.12 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
800781	Firefox < 1.0.7 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2005-2871

critical

Tenable Plugins

high

high

high

high

high

high

high

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high