NetSight
IP …
critical10.0

CVE-2004-0904

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote atta…

Impact

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3
MozillaMozilla
Versions 1.7, 1.7.1, 1.7.2
MozillaThunderbird
Versions 0.6, 0.7, 0.7.1, 0.7.2, 0.7.3
NetscapeNavigator
Versions 7.0, 7.0.2, 7.1, 7.2
ConectivaLinux
Versions 9.0, 10.0
RedhatEnterprise Linux
Versions 2.1, 3.0
RedhatEnterprise Linux Desktop
Version 3.0
RedhatFedora Core
Version core_1.0
RedhatLinux
Versions 7.3, 9.0
RedhatLinux Advanced Workstation
Version 2.1

References