CVE-2002-1091: Mozilla

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.

Affected products

• Mozilla Mozilla: version 0.9.5 only; version 0.9.6 only; version 0.9.7 only; version 0.9.8 only; version 0.9.9 only; version 1.0 only
• Netscape Navigator: version 6.2 only; version 6.2.1 only; version 6.2.2 only; version 6.2.3 only
• Opera Software Opera Web Browser: version 5.12 only; version 6.0 only; version 6.0.1 only

Published 2002-10-04. Last modified 2026-06-16.