Unrated severityNVD Advisory· Published May 2, 2005· Updated Jun 16, 2026
CVE-2005-0255
CVE-2005-0255
Description
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0
cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*
- (no CPE)range: =1.7.3
cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*
- (no CPE)range: <1.0.2
Patches
Vulnerability mechanics
References
13- www.gentoo.org/security/en/glsa/glsa-200503-10.xmlnvdPatchVendor Advisory
- www.gentoo.org/security/en/glsa/glsa-200503-30.xmlnvdPatchVendor Advisory
- www.idefense.com/application/poi/displaynvdPatchVendor Advisory
- www.novell.com/linux/security/advisories/2005_16_mozilla_firefox.htmlnvdPatchVendor Advisory
- www.redhat.com/support/errata/RHSA-2005-277.htmlnvdPatchVendor Advisory
- www.redhat.com/support/errata/RHSA-2005-337.htmlnvdPatchVendor Advisory
- www.mozilla.org/security/announce/mfsa2005-18.htmlnvdVendor Advisory
- secunia.com/advisories/19823nvd
- www.novell.com/linux/security/advisories/2006_04_25.htmlnvd
- www.redhat.com/support/errata/RHSA-2005-176.htmlnvd
- www.securityfocus.com/bid/12659nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100040nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9111nvd
News mentions
0No linked articles in our index yet.