CVE-2005-4134 PUBLISHED CVSS 5 MEDIUM

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.

EPSS 27.69% · 96.4th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
27.69%
96.4th percentile

Affected Products

VendorProductVersions
netscapenavigator7.1, 7.2, 0
mozillafirefox0
k-meleon_projectk-meleon0.8, 0.8.1, 0.8.2
mozillamozilla_suite0
n/an/a*

Timeline

References

…and 37 more

Open in Interactive Console →