Detections
Analytics
Mozilla Firefox < 1.7.5 NNTP Remote Heap Overflow
medium Nessus Network Monitor Plugin ID 2481
Synopsis
The remote host has a web browser installed that is vulnerable to a heap overflow.Description
Versions of Mozilla Firefox prior to 1.7.5 are vulnerable to a heap overflow against its NNTP functionality. This may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it.Solution
Upgrade to Mozilla Firefox 1.7.5 or later.See Also
Plugin Details
Severity: Medium
ID: 2481
Family: Web Clients
Published: 12/30/2004
Updated: 3/6/2019
Nessus ID: 16085
Risk Information
VPR
Risk Factor: Medium
Score: 5.3
CVSS v2
Risk Factor: Medium
Base Score: 6.9
Temporal Score: 5.7
Vector: CVSS2#AV:A/AC:M/Au:N/C:P/I:P/A:C
CVSS v3
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 5.9
Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:mozilla:firefox
Reference Information
CVE: CVE-2004-1316, CVE-2005-0141, CVE-2005-0143, CVE-2005-0144, CVE-2005-0145, CVE-2005-0146, CVE-2005-0147, CVE-2005-0148, CVE-2005-0149, CVE-2005-0150