Vulnerability in Mozilla
CVE-2002-2061
Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width and height values and an 8-bit or 16-bit alpha channel.
EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.
Affected products
- Mozilla
- Netscape Navigator — versions 6.2.3
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (Patch, vdb-entry, x_refsource_XF)