Lucene search

K
cve[email protected]CVE-2004-0902
HistoryJan 27, 2005 - 5:00 a.m.

CVE-2004-0902

2005-01-2705:00:00
NVD-CWE-Other
web.nvd.nist.gov
26
mozilla firefox
thunderbird
buffer overflow
remote attack
application crash
arbitrary code execution
nvd

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.742 High

EPSS

Percentile

98.1%

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the “Send page” functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.742 High

EPSS

Percentile

98.1%

Related for CVE-2004-0902