CVE-2002-2061: Mozilla

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width and height values and an 8-bit or 16-bit alpha channel.

Affected products

• Mozilla Mozilla: up to and including 1.0
• Netscape Navigator: version 6.2.3 only

Published 2002-12-31. Last modified 2026-06-16.