CVE-2005-2414

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-08-03 · updated 2026-06-16

Description

Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service (application crash) via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering page and referenced objects to be deleted.

Affected products

Xpcom: all versions

References

http://marc.info/?l=bugtraq&m=112199282029269&w=2
http://securitytracker.com/id?1014548
http://securitytracker.com/id?1014550
http://www.gulftech.org/?node=research&article_id=00091-07212005
https://exchange.xforce.ibmcloud.com/vulnerabilities/21472
http://marc.info/?l=bugtraq&m=112199282029269&w=2
http://securitytracker.com/id?1014548
http://securitytracker.com/id?1014550
http://www.gulftech.org/?node=research&article_id=00091-07212005
https://exchange.xforce.ibmcloud.com/vulnerabilities/21472

Get alerted when CVE-2005-2414 or the next vulnerability affects your stack