CVE-2005-4720

Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the…

published February 15, 2006

CVSS
—
EPSS
8%
Percentile
95.0
In the wild
Unconfirmed
What it is

Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a problem related to representation of floating-point numbers, leading to an infinite loop of widget resizes and a corresponding large number of function calls on the stack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08410 · 95.0th percentile
Published
2006-02-15T11:00Z
EPSS history
Timeline
  • 15 FEB 11:00Z
    Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the…
    cvelistv5