CVE-2002-1091
published 2002-10-04CVE-2002-1091: Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
4.28%
89.9th percentile
Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | mozilla | — | — |
| mozilla | mozilla | — | — |
| mozilla | mozilla | — | — |
| mozilla | mozilla | — | — |
| mozilla | mozilla | — | — |
| mozilla | mozilla | — | — |
| netscape | navigator | — | — |
| netscape | navigator | — | — |
| netscape | navigator | — | — |
| netscape | navigator | — | — |
| opera_software | opera_web_browser | — | — |
| opera_software | opera_web_browser | — | — |
| opera_software | opera_web_browser | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2002-09-06·CVSS 7.5
CVE-2002-1091 [HIGH] security flaw
security flaw
Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
GHSA
GHSA-c7hg-5qw2-jh2v: Netscape 6
ghsa_unreviewed·2022-04-30
CVE-2002-1091 [HIGH] GHSA-c7hg-5qw2-jh2v: Netscape 6
Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
No detection rules found.
No public exploits indexed.
http://bugzilla.mozilla.org/show_bug.cgi?id=157989http://crash.ihug.co.nz/~Sneuro/zerogif/http://marc.info/?l=bugtraq&m=103134051120770&w=2http://www.iss.net/security_center/static/10058.phphttp://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075http://www.redhat.com/support/errata/RHSA-2002-192.htmlhttp://www.redhat.com/support/errata/RHSA-2003-046.htmlhttp://www.securityfocus.com/bid/5665http://bugzilla.mozilla.org/show_bug.cgi?id=157989http://crash.ihug.co.nz/~Sneuro/zerogif/http://marc.info/?l=bugtraq&m=103134051120770&w=2http://www.iss.net/security_center/static/10058.phphttp://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075http://www.redhat.com/support/errata/RHSA-2002-192.htmlhttp://www.redhat.com/support/errata/RHSA-2003-046.htmlhttp://www.securityfocus.com/bid/5665
2002-10-04
Published