PT-2004-1934 · Mozilla · Firefox+2

Publicado

2004-09-24

·

Atualizado

2018-05-03

·

CVE-2004-0902

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to the Preview Release Mozilla versions prior to 1.7.3 Thunderbird versions prior to 0.8
Description: The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers. This can lead to a denial of service, causing the application to crash, or potentially allow the execution of arbitrary code. The overflows can occur through various means, including the "Send page" functionality, certain responses from a malicious POP3 server, or a link containing a non-ASCII hostname.
Recommendations: For Mozilla Firefox versions prior to the Preview Release, update to the Preview Release or later. For Mozilla versions prior to 1.7.3, update to version 1.7.3 or later. For Thunderbird versions prior to 0.8, update to version 0.8 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2004-0902

Produtos afetados

Mozilla Firefox
Firefox
Thunderbird