CVEvulnerability
CVE-2004-0978
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.
Affected configurations
• microsoft internet explorer 5.01
• microsoft internet explorer 5.5
• microsoft internet explorer 6
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://marc.info/?l=bugtraq&m=110616221411579&w=2 Issue Tracking, Third Party Advisory
- http://www.kb.cert.org/vuls/id/673134 Third Party Advisory, US Government Resource
- http://www.ngssoftware.com/advisories/heartbeatfull.txt Broken Link
- http://www.securityfocus.com/bid/11367 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17714 Third Party Advisory, VDB Entry
- http://marc.info/?l=bugtraq&m=110616221411579&w=2 Issue Tracking, Third Party Advisory
- http://www.kb.cert.org/vuls/id/673134 Third Party Advisory, US Government Resource
- http://www.ngssoftware.com/advisories/heartbeatfull.txt Broken Link
- http://www.securityfocus.com/bid/11367 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17714 Third Party Advisory, VDB Entry