FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0902

This CVE name corresponds to:

Entered	Topic
2004-09-28	mozilla -- multiple heap buffer overflows

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0902 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0902
Phase	Assigned(20040923)

Description

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.

References

Source	Reference
CONFIRM	http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
CONFIRM	http://bugzilla.mozilla.org/show_bug.cgi?id=258005
CONFIRM	http://bugzilla.mozilla.org/show_bug.cgi?id=245066
CONFIRM	http://bugzilla.mozilla.org/show_bug.cgi?id=226669
CONFIRM	http://bugzilla.mozilla.org/show_bug.cgi?id=256316
FEDORA	FLSA:2089
GENTOO	GLSA-200409-26
SUSE	SUSE-SA:2004:036
HP	SSRT4826
CERT-VN	VU#327560
CERT-VN	VU#125776
CERT-VN	VU#808216
CERT	TA04-261A
OVAL	oval:org.mitre.oval:def:11201
XF	mozilla-netscape-nonascii-bo(17378)
XF	mozilla-nspop3protocol-bo(17379)