FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0904

This CVE name corresponds to:

Entered Topic
2004-09-28 mozilla -- BMP decoder vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2004-0904
Phase Assigned(20040923)

Description

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.

References

Source Reference
CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=255067
FEDORA FLSA:2089
GENTOO GLSA-200409-26
HP SSRT4826
SUSE SUSE-SA:2004:036
CERT TA04-261A
CERT-VN VU#847200
BID 11171
OVAL oval:org.mitre.oval:def:10952
XF mozilla-netscape-bmp-bo(17381)