Total vulnerabilities in the database
Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '' (backslash) character, which prevents a string from being NULL terminated.
| Software | From | Fixed in |
|---|---|---|
| mozilla / mozilla | 1.7-alpha | 1.7-alpha.x |
| mozilla / mozilla | 1.7-rc1 | 1.7-rc1.x |
| mozilla / mozilla | 1.5-rc2 | 1.5-rc2.x |
| mozilla / mozilla | 1.7 | 1.7.x |
| mozilla / mozilla | 1.6-beta | 1.6-beta.x |
| mozilla / mozilla | 1.4.1 | 1.4.1.x |
| mozilla / mozilla | 1.5-alpha | 1.5-alpha.x |
| mozilla / mozilla | 1.5-rc1 | 1.5-rc1.x |
| mozilla / mozilla | 1.3 | 1.3.x |
| mozilla / mozilla | 1.7-beta | 1.7-beta.x |
| mozilla / mozilla | 1.4 | 1.4.x |
| mozilla / mozilla | 1.5 | 1.5.x |
| mozilla / mozilla | - | - |
| mozilla / mozilla | 1.7.1 | 1.7.1.x |
| mozilla / mozilla | 1.4-alpha | 1.4-alpha.x |
| mozilla / mozilla | 1.5.1 | 1.5.1.x |
| mozilla / mozilla | 1.7.2 | 1.7.2.x |
| mozilla / mozilla | 1.7-rc3 | 1.7-rc3.x |
| mozilla / mozilla | 1.7-rc2 | 1.7-rc2.x |
| mozilla / mozilla | 1.7.3 | 1.7.3.x |
| mozilla / mozilla | 1.6-alpha | 1.6-alpha.x |
| mozilla / mozilla | 1.6 | 1.6.x |