{"id":"CVE-2005-0399","aliases":["EUVD-2005-0400","GHSA-x75c-2774-mpv3","RHSA-2005:335","RHSA-2005:336","RHSA-2005:337"],"status":"published","title":"Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and...","description":"Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.15116,"percentile":0.96759,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-03-24T05:00:00Z","modified":"2026-06-26T10:02:50Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.4.1"}]}],"bundled":2}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"mozilla"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2005-323.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-336.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/0296","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","tags":["vendor-advisory","x_refsource_SCO","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100028","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-335.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19823","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/15495","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.ciac.org/ciac/bulletins/p-160.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19269","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/12881","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-30.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=150877","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://xforce.iss.net/xforce/alerts/id/191","tags":["third-party-advisory","x_refsource_ISS","x_transferred","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/557948","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11377","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://secunia.com/advisories/14654","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-337.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0399","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-x75c-2774-mpv3"},{"url":"https://access.redhat.com/errata/RHSA-2005:335","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=142508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=144228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=147397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=150866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=151730","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_335.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1380","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1380","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617473","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0146","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0146","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617475","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0149","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0399","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617519","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0401","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:336","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=150877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=151153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=151714","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_336.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617521","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0402","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:337","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=150874","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_337.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617509","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0255","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-0399","description":"Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.","status":"published","published":"2005-03-24T05:00:00Z","modified":"2024-08-07T21:13:53.801Z","updated_at":"2026-11-02T14:33:40.909668Z"}],"euvd":[{"id":"EUVD-2005-0400","description":"Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.","status":"published","published":"2005-03-24T05:00:00Z","modified":"2024-08-07T21:13:53Z","updated_at":"2026-11-03T01:15:38.73276Z"}],"ghsa":[{"id":"GHSA-x75c-2774-mpv3","title":"Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and...","description":"Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.","status":"published","published":"2022-05-03T03:14:02Z","modified":"2023-02-01T05:01:11Z","updated_at":"2026-11-02T14:49:41.113902Z"}],"nvd":[{"id":"CVE-2005-0399","description":"Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.","status":"published","published":"2005-05-02T04:00:00Z","modified":"2026-06-16T22:11:02.3Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:54.933728Z"}],"osv":[{"id":"RHSA-2005:335","title":"Red Hat Security Advisory: mozilla security update","status":"published","published":"2024-09-15T15:21:22Z","modified":"2026-06-26T10:02:49Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:336","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-15T15:21:27Z","modified":"2026-06-26T10:02:50Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:337","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-15T15:21:30Z","modified":"2026-06-26T10:02:50Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}