vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2004-0902

N/A
Published: September 24, 2004 at 04:00 AM UTC
Updated: June 16, 2026 at 10:06 PM UTC
9 products affected across 4 vendorsEnterprise LinuxThunderbirdEnterprise Linux Desktop

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 10%

Description

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (13)

x_refsource_CONFIRM
Source: [email protected]
http://bugzilla.mozilla.org/show_bug.cgi?id=226669
x_refsource_CONFIRM
Source: [email protected]
http://bugzilla.mozilla.org/show_bug.cgi?id=245066
x_refsource_CONFIRM
Source: [email protected]
http://bugzilla.mozilla.org/show_bug.cgi?id=256316
x_refsource_CONFIRM
Source: [email protected]
http://bugzilla.mozilla.org/show_bug.cgi?id=258005
Vendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=109698896104418&w=2
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://marc.info/?l=bugtraq&m=109900315219363&w=2
Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
http://security.gentoo.org/glsa/glsa-200409-26.xml
x_refsource_CONFIRM
Source: [email protected]
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card