10

CVE-2004-0903

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Mozilla Version 1.7
Mozilla ≫ Mozilla Version 1.7.1
Mozilla ≫ Mozilla Version 1.7.2
Mozilla ≫ Thunderbird Version 0.7
Mozilla ≫ Thunderbird Version 0.7.1
Mozilla ≫ Thunderbird Version 0.7.2
Mozilla ≫ Thunderbird Version 0.7.3
Conectiva ≫ Linux Version 9.0
Conectiva ≫ Linux Version 10.0
Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server
Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server_ia64
Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server_ia64
Redhat ≫ Enterprise Linux Version 2.1 Edition workstation
Redhat ≫ Enterprise Linux Version 2.1 Edition workstation_ia64
Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_server
Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 3.0 Edition workstation_server
Redhat ≫ Fedora Core Version core_1.0
Redhat ≫ Linux Version 7.3
Redhat ≫ Linux Version 7.3 Edition i386
Redhat ≫ Linux Version 7.3 Edition i686
Redhat ≫ Linux Version 9.0 Edition i386
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium_processor
Suse ≫ Suse Linux Version 1.0 Edition desktop
Suse ≫ Suse Linux Version 8 Edition enterprise_server
Suse ≫ Suse Linux Version 8.1
Suse ≫ Suse Linux Version 8.2
Suse ≫ Suse Linux Version 9.0
Suse ≫ Suse Linux Version 9.0 Edition enterprise_server
Suse ≫ Suse Linux Version 9.0 Edition x86_64
Suse ≫ Suse Linux Version 9.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.75% 0.949
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=109900315219363&w=2
http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
http://marc.info/?l=bugtraq&m=109698896104418&w=2
http://security.gentoo.org/glsa/glsa-200409-26.xml
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
http://www.us-cert.gov/cas/techalerts/TA04-261A.html
US Government Resource
http://bugzilla.mozilla.org/show_bug.cgi?id=257314
Vendor Advisory
http://www.kb.cert.org/vuls/id/414240
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/11174
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17380
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10873