cbcvebase.
CVE-2004-0826
published 2004-12-31

CVE-2004-0826: Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length…

PriorityP344high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
22.53%
97.5th percentile
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

Affected

57 ranges· showing 25
VendorProductVersion rangeFixed in
hphp-ux
hphp-ux
hphp-ux
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
mozillanetwork_security_services
netscapecertificate_server
netscapecertificate_server
netscapedirectory_server
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.