CyberSec.Space Logo
Back to CVE Browser

CVE-2004-0904

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0180%
EPSS Percentile34.83th
PublishedDec 31, 2004
Last ModifiedApr 16, 2026

Vulnerability Description

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.

Affected Platforms (CPE)

πŸ“¦
Mozilla

Firefox

= 0.8
πŸ“¦
Mozilla

Firefox

= 0.9
πŸ“¦
Mozilla

Firefox

= 0.9
πŸ“¦
Mozilla

Firefox

= 0.9.1
πŸ“¦
Mozilla

Firefox

= 0.9.2
πŸ“¦
Mozilla

Firefox

= 0.9.3
πŸ“¦
Mozilla

Mozilla

= 1.7
πŸ“¦
Mozilla

Mozilla

= 1.7
πŸ“¦
Mozilla

Mozilla

= 1.7.1
πŸ“¦
Mozilla

Mozilla

= 1.7.2
πŸ“¦
Mozilla

Thunderbird

= 0.6
πŸ“¦
Mozilla

Thunderbird

= 0.7
πŸ“¦
Mozilla

Thunderbird

= 0.7.1
πŸ“¦
Mozilla

Thunderbird

= 0.7.2
πŸ“¦
Mozilla

Thunderbird

= 0.7.3
πŸ“¦
Netscape

Navigator

= 7.0
πŸ“¦
Netscape

Navigator

= 7.0.2
πŸ“¦
Netscape

Navigator

= 7.1
πŸ“¦
Netscape

Navigator

= 7.2
πŸ’»
Conectiva

Linux

= 9.0
πŸ’»
Conectiva

Linux

= 10.0
πŸ’»
Redhat

Enterprise Linux

= 2.1
πŸ’»
Redhat

Enterprise Linux

= 2.1
πŸ’»
Redhat

Enterprise Linux

= 2.1
πŸ’»
Redhat

Enterprise Linux

= 2.1
πŸ’»
Redhat

Enterprise Linux

= 2.1
πŸ’»
Redhat

Enterprise Linux

= 2.1
πŸ’»
Redhat

Enterprise Linux

= 3.0
πŸ’»
Redhat

Enterprise Linux

= 3.0
πŸ’»
Redhat

Enterprise Linux

= 3.0
πŸ’»
Redhat

Enterprise Linux Desktop

= 3.0
πŸ’»
Redhat

Fedora Core

= core_1.0
πŸ’»
Redhat

Linux

= 7.3
πŸ’»
Redhat

Linux

= 7.3
πŸ’»
Redhat

Linux

= 7.3
πŸ’»
Redhat

Linux

= 9.0
πŸ’»
Redhat

Linux Advanced Workstation

= 2.1
πŸ’»
Redhat

Linux Advanced Workstation

= 2.1

References & Advisories

Related Vulnerabilities