CVE-2004-0757 Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.
HighCVSS 10.0
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 0.9 | No fix listed |
| mozilla | <= 1.7 | No fix listed |
| mozilla Thunderbird | <= 0.7 | No fix listed |
References
- bugzilla.mozilla.org patch vendor-advisory
- FLSA:2089 vendor-advisory
- 10856 third-party-advisory
- VU#561022 third-party-advisory us-government-resource
- www.mozilla.org
- SUSE-SA:2004:036 vendor-advisory
- RHSA-2004:421 vendor-advisory
- 15495 vdb-entry
- mozilla-senduidl-pop3-bo(16869) vdb-entry
- oval:org.mitre.oval:def:11042 signature vdb-entry
- oval:org.mitre.oval:def:3250 signature vdb-entry