peter bassill · operator
$ cve CVE-2005-4134 JSON

CVE-2005-4134 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 12.6% (pctl 96)

Patch early

A public exploit exists.

Description

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS12.59% — more likely to be exploited than 96% of all CVEs
On CISA KEVno
Public exploityes
Published2005-12-09
Last modified2026-06-16

Affected (4)

VendorProduct
k-meleon projectk-meleon
mozillafirefox
mozillamozilla suite
netscapenavigator

Public exploits

SourceTitleDate
exploit-dbMozilla Firefox 0.x/1.x - Large History File Buffer Overflow2005-12-08

References

→ the Explorer  ·  watch your stack  ·  NVD