CVE-2005-0989

Publication date 2 May 2005

Last updated 24 July 2024

Ubuntu priority

The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
mozilla	7.04 feisty	Not in release
	6.10 edgy	Fixed 1.7.12-1.1ubuntu2
	6.06 LTS dapper	Fixed 1.7.12-1.1ubuntu2
mozilla-thunderbird	7.04 feisty	Fixed 1.5.0.13-0ubuntu0.7.04
	6.10 edgy	Fixed 1.5.0.13-0ubuntu0.6.10
	6.06 LTS dapper	Fixed 1.5.0.13-0ubuntu0.6.06

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-157-1
Mozilla Thunderbird vulnerabilities
1 August 2005

USN-149-3
Ubuntu 4.10 update for Firefox vulnerabilities
28 July 2005

Other references

https://www.cve.org/CVERecord?id=CVE-2005-0989