Vulnerability in Mozilla
CVE-2002-1091
Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
EPSS: 0.043 (89.9th percentile) — read the EPSS interpretation.
Affected products
- Mozilla — versions 0.9.5, 0.9.6, 0.9.7
- Netscape Navigator — versions 6.2, 6.2.1, 6.2.2
- Opera_software Opera_web_browser — versions 5.12, 6.0, 6.0.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)