← Database

CVE-2004-0902

CRITICAL CVSS: 10.0 Published: 2005-01-27 Modified: 2026-06-16

Description

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.

Affected Platforms

Redhat Enterprise LinuxRedhat Enterprise Linux DesktopSuse Suse LinuxRedhat Linux Advanced WorkstationRedhat Fedora CoreMozilla MozillaMozilla ThunderbirdConectiva LinuxRedhat Linux

Weakness Type

NVD-CWE-Other

References