CVE-2005-2414: Xpcom

Low severity, CVSS 2.6. EPSS: 3.4% chance of exploitation in the next 30 days.

Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to cause a denial of service (application crash) via a large HTML file that loads a DOM call from within nested DIV tags, which causes part of the currently rendering page and referenced objects to be deleted.

Affected products

• Xpcom Xpcom: any version

Published 2005-08-03. Last modified 2026-06-16.