CVE-2004-0904
N/A
N/A
Summary
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17381
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
- http://marc.info/?l=bugtraq&m=109900315219363&w=2
- http://bugzilla.mozilla.org/show_bug.cgi?id=255067
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
- http://security.gentoo.org/glsa/glsa-200409-26.xml
- http://www.securityfocus.com/bid/11171
- http://www.us-cert.gov/cas/techalerts/TA04-261A.html
- http://marc.info/?l=bugtraq&m=109698896104418&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952
- http://www.kb.cert.org/vuls/id/847200
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17381
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
- http://marc.info/?l=bugtraq&m=109900315219363&w=2
- http://bugzilla.mozilla.org/show_bug.cgi?id=255067
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
- http://security.gentoo.org/glsa/glsa-200409-26.xml
- http://www.securityfocus.com/bid/11171
- http://www.us-cert.gov/cas/techalerts/TA04-261A.html
- http://marc.info/?l=bugtraq&m=109698896104418&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952
- http://www.kb.cert.org/vuls/id/847200
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.