CVE-2004-0902 in Firefox

Summary

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

09/23/2004

Disclosure

01/27/2005

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
840	Mozilla Firefox heap-based overflow	122	Not defined	Official fix	CVE-2004-0902
839	Mozilla Firefox heap-based overflow	122	Not defined	Official fix	CVE-2004-0902
838	Mozilla Firefox heap-based overflow	122	Proof-of-Concept	Official fix	CVE-2004-0902
837	Mozilla Firefox heap-based overflow	122	Not defined	Official fix	CVE-2004-0902
836	Mozilla Firefox heap-based overflow	122	Proof-of-Concept	Official fix	CVE-2004-0902
835	Mozilla Firefox Textbox heap-based overflow	122	Proof-of-Concept	Official fix	CVE-2004-0902

Sources

• MITRE
• NVD
• CVE Details