CVE-2004-0902: Buffer Overflow
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0902?
CVE-2004-0902 has a severity rating that indicates a potential for denial of service and arbitrary code execution.
How do I fix CVE-2004-0902?
To fix CVE-2004-0902, upgrade to Mozilla Firefox version 1.7.3, Mozilla version 1.7.3, or Thunderbird version 0.8 or higher.
What versions are affected by CVE-2004-0902?
CVE-2004-0902 affects Mozilla Firefox before 1.7.3, Mozilla before 1.7.3, and Thunderbird before 0.8.
Can CVE-2004-0902 lead to system crashes?
Yes, CVE-2004-0902 can cause application crashes due to heap-based buffer overflows.
Is CVE-2004-0902 specific to certain operating systems?
CVE-2004-0902 affects multiple operating systems, including Conectiva Linux, SUSE Linux, and Red Hat Linux.