CVE-2004-0902 Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application cr...
HighCVSS 10.0
EPSS 10.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 1.7 | No fix listed |
| mozilla | = 1.7.1 | No fix listed |
| mozilla | = 1.7.2 | No fix listed |
| mozilla Thunderbird | = 0.7 | No fix listed |
| mozilla Thunderbird | = 0.7.1 | No fix listed |
| mozilla Thunderbird | = 0.7.2 | No fix listed |
| mozilla Thunderbird | = 0.7.3 | No fix listed |
| conectiva linux | = 9.0 | No fix listed |
| conectiva linux | = 10.0 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat fedora core | = core_1.0 | No fix listed |
| redhat linux | = 7.3 | No fix listed |
| redhat linux | = 9.0 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 8 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
References
- bugzilla.mozilla.org
- bugzilla.mozilla.org
- bugzilla.mozilla.org
- bugzilla.mozilla.org
- SSRT4826 vendor-advisory
- FLSA:2089 vendor-advisory
- GLSA-200409-26 vendor-advisory
- www.mozilla.org
- SUSE-SA:2004:036 vendor-advisory
- TA04-261A patch third-party-advisory us-government-resource
- mozilla-netscape-nonascii-bo(17378) vdb-entry
- mozilla-nspop3protocol-bo(17379) vdb-entry
- oval:org.mitre.oval:def:11201 signature vdb-entry