Integer Overflow Vulnerability in Mozilla Firefox and Thunderbird Products
CVE-2004-0904
Currently unrated
Key Information:
- Vendor
Mozilla
- Vendor
- CVE Published:
- 31 December 2004
What is CVE-2004-0904?
An integer overflow vulnerability exists in the BMP decoder for Mozilla Firefox and Thunderbird, allowing remote attackers to execute arbitrary code. By sending specially crafted wide bitmap files, attackers can trigger heap-based buffer overflows, potentially compromising the security of affected systems. This flaw impacts versions prior to Firefox 1.7.3 and Thunderbird 0.8, necessitating prompt updates to mitigate risks.