CVE-2005-4134
Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.
Published:Dec 3, 2005
Last Modified:Apr 16, 2026
EPS:Dec 9, 2005
EPSS Score:0.27694
CVSS Score:5
Affected Products
Vendor
Product
Action
Vendor
K-meleon Project
Product
K-meleon
K-meleon Project
K-meleon
Vendor
Mozilla
Product
Firefox
Mozilla
Firefox
Vendor
Mozilla
Product
Mozilla Suite
Mozilla
Mozilla Suite
Vendor
Netscape
Product
Navigator
Netscape
Navigator
Vendor
Redhat
Product
Enterprise Linux
Redhat
Enterprise Linux
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
