CVE-2004-0904
published 2004-12-31CVE-2004-0904: Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote…
PriorityP337critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
8.01%
94.8th percentile
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | mozilla | — | — |
| mozilla | mozilla | — | — |
| mozilla | mozilla | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | — | — |
| netscape | navigator | — | — |
| netscape | navigator | — | — |
| netscape | navigator | — | — |
| netscape | navigator | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | fedora_core | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2004-08-27·CVSS 10.0
CVE-2004-0904 [CRITICAL] security flaw
security flaw
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
GHSA
GHSA-238r-rqpq-9cqf: Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1
ghsa_unreviewed·2022-04-29
CVE-2004-0904 [HIGH] GHSA-238r-rqpq-9cqf: Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
No detection rules found.
No public exploits indexed.
http://bugzilla.mozilla.org/show_bug.cgi?id=255067http://marc.info/?l=bugtraq&m=109698896104418&w=2http://marc.info/?l=bugtraq&m=109900315219363&w=2http://security.gentoo.org/glsa/glsa-200409-26.xmlhttp://www.kb.cert.org/vuls/id/847200http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3http://www.novell.com/linux/security/advisories/2004_36_mozilla.htmlhttp://www.securityfocus.com/bid/11171http://www.us-cert.gov/cas/techalerts/TA04-261A.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/17381https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952http://bugzilla.mozilla.org/show_bug.cgi?id=255067http://marc.info/?l=bugtraq&m=109698896104418&w=2http://marc.info/?l=bugtraq&m=109900315219363&w=2http://security.gentoo.org/glsa/glsa-200409-26.xmlhttp://www.kb.cert.org/vuls/id/847200http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3http://www.novell.com/linux/security/advisories/2004_36_mozilla.htmlhttp://www.securityfocus.com/bid/11171http://www.us-cert.gov/cas/techalerts/TA04-261A.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/17381https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952
2004-12-31
Published