CVE-2005-0989: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 10% chance of exploitation in the next 30 days.

The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.

Affected products

• Mozilla Firefox: version 1.0.1 only; version 1.0.2 only
• Mozilla Mozilla: version 1.7.6 only
• Netscape Navigator: version 7.2 only

Published 2005-05-02. Last modified 2026-06-16.