--- title: "CVE-2005-0399\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2005-0399?format=md keywords: index, follow --- # CVE-2005-0399 Publication date 2 May 2005 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 7.10 gutsy | Fixed 2.0.0.6+1-0ubuntu1 | | 7.04 feisty | Fixed 2.0.0.6+1-0ubuntu1 | | 6.10 edgy | Fixed 2.0.0.6+0dfsg-0ubuntu0.6.10 | | 6.06 LTS dapper | Fixed 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1 | | firefox-3.0 | 7.10 gutsy | Fixed 3.0~alpha7-0ubuntu6 | | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | lightning-sunbird | 7.10 gutsy | Fixed 0.5-0ubuntu4 | | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | midbrowser | 7.10 gutsy | Fixed 0.1.6b-0ubuntu2 | | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Not in release | | mozilla | 7.10 gutsy | Not in release | | 7.04 feisty | Not in release | | 6.10 edgy | Ignored end of life, was needed | | 6.06 LTS dapper | Not affected | | mozilla-thunderbird | 7.10 gutsy | Not in release | | 7.04 feisty | Not affected | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Not affected | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0399) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2005-0399) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2005-0399) * [Debian](https://security-tracker.debian.org/tracker/CVE-2005-0399) ### Related Ubuntu Security Notices (USN) + [USN-149-3](https://usn.ubuntu.com/USN-149-3) + Ubuntu 4.10 update for Firefox vulnerabilities + 28 July 2005 ### Other references *