CVE-2005-0255

CVE-2005-0255 describes a denial-of-service and potential arbitrary code execution vulnerability in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2. The flaw stems from improper return value checks in string handling functions, such as nsTSubstring_CharT::Replace, when resizing strings. This can lead to heap corruption if an out-of-memory condition causes reallocation to fail and return a fixed address. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is remotely exploitable with low attack complexity and requires no authentication, primarily leading to a denial of service (availability impact). While arbitrary code execution is possible, the primary impact is system instability. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention from researchers or the public.