CVE-2004-0722 Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.
HighCVSS 10.0
EPSS 13.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 1.6 | No fix listed |
| netscape navigator | = 7.0 | No fix listed |
| netscape navigator | = 7.1 | No fix listed |
References
- bugzilla.mozilla.org
- www.idefense.com
- SUSE-SA:2004:036 vendor-advisory
- RHSA-2004:421 vendor-advisory
- 15495 vdb-entry
- mozilla-netscape-soapparameter-bo(16862) vdb-entry
- oval:org.mitre.oval:def:4629 signature vdb-entry
- oval:org.mitre.oval:def:9378 signature vdb-entry