FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0757

This CVE name corresponds to:

Entered Topic
2004-09-14 mozilla -- POP client heap overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2004-0757
Phase Assigned(20040802)

Description

Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.

References

Source Reference
CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=229374
FEDORA FLSA:2089
REDHAT RHSA-2004:421
SCO SCOSA-2005.49
SUSE SUSE-SA:2004:036
CERT-VN VU#561022
BID 15495
OVAL oval:org.mitre.oval:def:3250
OVAL oval:org.mitre.oval:def:11042
SECUNIA 10856
XF mozilla-senduidl-pop3-bo(16869)