VULNERABILITY INTELLIGENCE
CVE-2005-2414
CVSS score2.6 LOW
EPSS probability3.39%
CISA KEVNot currently listed
Published2005-08-03
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:P
Description
Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service (application crash) via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering page and referenced objects to be deleted.