Detections
Analytics
Mozilla nsNNTPProtocol.cpp NNTP news:// URI Handling Overflow DoS
high Nessus Plugin ID 16085
Synopsis
A web browser on the remote host is prone to a heap overflow attack.Description
The remote version of Mozilla is vulnerable to a heap overflow attack against its NNTP functionality.This may allow an attacker to execute arbitrary code on the remote host.
To exploit this flaw, an attacker would need to set up a rogue news site and lure a victim on the remote host into reading news from it.
Solution
Upgrade to Mozilla 1.7.5 or newer.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2005-06/
Plugin Details
Severity: High
ID: 16085
File Name: mozilla_nntp_heap_overflow.nasl
Version: 1.23
Type: local
Agent: windows
Family: Windows
Published: 1/2/2005
Updated: 7/16/2018
Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:mozilla:mozilla, cpe:/a:mozilla:thunderbird
Required KB Items: Mozilla/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 12/24/2004
Vulnerability Publication Date: 12/29/2004
Reference Information
CVE: CVE-2004-1316