CVE-2004-0904

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0904

bitmap decoder

mozilla

firefox

thunderbird

integer overflow

heap-based buffer overflow

nvd

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.117 Low

EPSS

Percentile

95.3%

JSON

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.

CPENameOperatorVersion
mozilla:thunderbirdmozilla thunderbirdeq0.6
mozilla:firefoxmozilla firefoxeq0.8
mozilla:thunderbirdmozilla thunderbirdeq0.7.2
conectiva:linuxconectiva linuxeq9.0
mozilla:mozillamozillaeq1.7
mozilla:firefoxmozilla firefoxeq0.9.1
netscape:navigatornetscape navigatoreq7.1
mozilla:firefoxmozilla firefoxeq0.9
netscape:navigatornetscape navigatoreq7.2
netscape:navigatornetscape navigatoreq7.0

CPE	Name	Operator	Version
mozilla:thunderbird	mozilla thunderbird	eq	0.6
mozilla:firefox	mozilla firefox	eq	0.8
mozilla:thunderbird	mozilla thunderbird	eq	0.7.2
conectiva:linux	conectiva linux	eq	9.0
mozilla:mozilla	mozilla	eq	1.7
mozilla:firefox	mozilla firefox	eq	0.9.1
netscape:navigator	netscape navigator	eq	7.1
mozilla:firefox	mozilla firefox	eq	0.9
netscape:navigator	netscape navigator	eq	7.2
netscape:navigator	netscape navigator	eq	7.0