CVE-2005-4134: K-Meleon Project K-Meleon

Medium severity, CVSS 5.0. EPSS: 12.6% chance of exploitation in the next 30 days.

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue.

Affected products

• K-Meleon Project K-Meleon: up to and including 0.9; version 0.7 only; version 0.7_service_pack_1 only; version 0.8 only; version 0.8.1 only; version 0.8.2 only
• Mozilla Firefox: up to and including 1.5
• Mozilla Mozilla Suite: up to and including 1.7.12
• Netscape Navigator: up to and including 8.0.40; version 7.1 only; version 7.2 only

Published 2005-12-09. Last modified 2026-06-16.