CVE-2004-0903

Severity

99%

Complexity

99%

Confidentiality

165%

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

First reported 20 years ago

2005-01-27 05:00:00

Last updated 7 years ago

2017-10-11 01:29:00

Affected Software

Mozilla Mozilla 1.7

1.7

Mozilla Mozilla 1.7.1

1.7.1

Mozilla Mozilla 1.7.2

1.7.2

Mozilla Thunderbird 0.7

0.7

Mozilla Thunderbird 0.7.1

0.7.1

Mozilla Thunderbird 0.7.2

0.7.2

Mozilla Thunderbird 0.7.3

0.7.3

Conectiva Linux 9.0

9.0

Conectiva Linux 10.0

10.0

Red Hat Desktop 3.0

3.0

Red Hat Linux 7.3

7.3

SuSE SuSE Linux 8.1

8.1

SuSE SuSE Linux 8.2

8.2

SuSE SuSE Linux 9.0

9.0

SuSE SuSE Linux 9.1

9.1

References

http://bugzilla.mozilla.org/show_bug.cgi?id=257314

Vendor Advisory

SSRT4826

FLSA:2089

GLSA-200409-26

VU#414240

Third Party Advisory, US Government Resource

http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3

SUSE-SA:2004:036

11174