CVE

Id
9332  
CVE No.
CVE-2004-0904  
Status
Candidate  
Description
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.  
Phase
Assigned (20040923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62026 9332 CVE-2004-0904 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3  View
62027 9332 CVE-2004-0904 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=255067  View
62028 9332 CVE-2004-0904 FEDORA:FLSA:2089  View
62029 9332 CVE-2004-0904 URL:http://marc.info/?l=bugtraq&m=109900315219363&w=2  View
62030 9332 CVE-2004-0904 GENTOO:GLSA-200409-26  View
62031 9332 CVE-2004-0904 URL:http://security.gentoo.org/glsa/glsa-200409-26.xml  View
62032 9332 CVE-2004-0904 HP:SSRT4826  View
62033 9332 CVE-2004-0904 URL:http://marc.info/?l=bugtraq&m=109698896104418&w=2  View
62034 9332 CVE-2004-0904 SUSE:SUSE-SA:2004:036  View
62035 9332 CVE-2004-0904 URL:http://www.novell.com/linux/security/advisories/2004_36_mozilla.html  View
62036 9332 CVE-2004-0904 CERT:TA04-261A  View
62037 9332 CVE-2004-0904 URL:http://www.us-cert.gov/cas/techalerts/TA04-261A.html  View
62038 9332 CVE-2004-0904 CERT-VN:VU#847200  View
62039 9332 CVE-2004-0904 URL:http://www.kb.cert.org/vuls/id/847200  View
62040 9332 CVE-2004-0904 BID:11171  View
62041 9332 CVE-2004-0904 URL:http://www.securityfocus.com/bid/11171  View
62042 9332 CVE-2004-0904 OVAL:oval:org.mitre.oval:def:10952  View
62043 9332 CVE-2004-0904 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10952  View
62044 9332 CVE-2004-0904 XF:mozilla-netscape-bmp-bo(17381)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63056 JVNDB-2004-000398 Mozilla 製品における javascript: リンクドラッグにより任意のコードを実行される脆弱性 Mozilla 製品には、javascript: で始まるリンクにおいてクロスドメインチェックが適切に行われていない問題があります。 CVE-2004-0905 9332 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000398.html  View