| Name | CVE-2005-3896 |
| Description | Mozilla allows remote attackers to cause a denial of service (CPU consumption) via a Javascript BODY onload event that calls the window function. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | CVE-2005-1790 |
| Debian Bugs | 340282, 340283, 345469 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| firefox (PTS) | sid | 132.0.2-1 | fixed |
The information below is based on the following data on fixed versions.
Notes
maintainers don't believe it is a security bug and can't reproduce after 1.5.dfsg-1