CVE-2004-0904: Buffer Overflow
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0904?
CVE-2004-0904 is considered to be of high severity as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2004-0904?
To fix CVE-2004-0904, upgrade to the latest versions of affected software such as Mozilla Firefox, Mozilla, or Thunderbird.
What software is affected by CVE-2004-0904?
CVE-2004-0904 affects Mozilla Firefox versions prior to 1.7.3, Mozilla versions prior to 1.7, and Thunderbird versions before 0.8.
What type of attack does CVE-2004-0904 facilitate?
CVE-2004-0904 facilitates heap-based buffer overflow attacks through specially crafted wide bitmap files.
Can CVE-2004-0904 be exploited remotely?
Yes, CVE-2004-0904 can be exploited remotely, allowing attackers to potentially control the affected system.