CVE-2002-1091

Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.28% chance of exploitation in the next 30 days, 90th percentile

Published

2004-09-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=103134051120770&w=2

References

• CVE Record
• NVD entry

Related

• CVE-2002-1089
• CVE-2002-1101
• CVE-2002-1079
• CVE-2002-1113
• CVE-2002-1077
• CVE-2002-1120