CVEvulnerability

CVE-2004-0903

10.0 HIGH Published 2005-01-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.

Affected configurations

• mozilla mozilla 1.7 • mozilla mozilla 1.7.1 • mozilla mozilla 1.7.2 • mozilla thunderbird 0.7 • mozilla thunderbird 0.7.1 • mozilla thunderbird 0.7.2 • mozilla thunderbird 0.7.3 • conectiva linux 9.0 • conectiva linux 10.0 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat fedora core core 1.0 • redhat linux 7.3 • redhat linux 9.0 • redhat linux advanced workstation 2.1 • suse suse linux 1.0 • suse suse linux 8 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1

References