HTTP: Mozilla Gif89A:Extension

This signature detects attempts to exploit a non-supported extension in the GIF decoding engine. Attackers can create a maliciously crafted GIF file exploiting this extension. A successful exploit can allow an attacker to create a denial of service (DoS) or execute arbitrary scripts with user privileges.

Extended Description

Multiple Mozilla products are affected by a remote heap-overflow vulnerability. This issue affects the GIF image processing library used by Mozilla Firefox, Mozilla Browser, and Mozilla Thunderbird Mail client. A successful attack can result in arbitrary code execution and in unauthorized access to the affected computer. Arbitrary code execution will take place in the context of a user running a vulnerable application. *Update: K-Meleon, which is based on the Mozilla Gecko-code base, is also prone to this issue.

Affected Products

Mozilla browser

References

BugTraq: 12881

CVE: CVE-2005-0399

URL: http://www.mozilla.org/security/announce/mfsa2005-30.html

Short Name

HTTP:STC:MOZILLA:GIF89A-EXT

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Mozilla Gif89A:Extension

Extended Description

Affected Products

References

Found a potential security threat?