01 Record

CVE-2004-0902

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 10.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 95.2% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2004-09-24 04:00Z22 YR AGO
Last updated: 2024-08-08 00:31Z2 YR AGO
Reserved: 2004-09-23
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: cd81affc888d5b36eaa4c43e41c54110ecc17281690e633004ffc39c2734820f

05 Affected products

VendorProductVersionsPlatforms

conectivalinuxNot specified—

mozillamozillaNot specified—

mozillathunderbirdNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatfedora_coreNot specified—

redhatlinuxNot specified—

redhatlinux_advanced_workstationNot specified—

susesuse_linuxNot specified—

06 References

oval.cisecurity.orgoval:org.mitre.oval:def:11201https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11201vdb-entrysignaturex_refsource_OVAL
www.novell.comSUSE-SA:2004:036http://www.novell.com/linux/security/advisories/2004_36_mozilla.htmlvendor-advisoryx_refsource_SUSE
marc.infoFLSA:2089http://marc.info/?l=bugtraq&m=109900315219363&w=2vendor-advisoryx_refsource_FEDORA
exchange.xforce.ibmcloud.commozilla-nspop3protocol-bo(17379)https://exchange.xforce.ibmcloud.com/vulnerabilities/17379vdb-entryx_refsource_XF
bugzilla.mozilla.orghttp://bugzilla.mozilla.org/show_bug.cgi?id=256316x_refsource_CONFIRM
bugzilla.mozilla.orghttp://bugzilla.mozilla.org/show_bug.cgi?id=245066x_refsource_CONFIRM
bugzilla.mozilla.orghttp://bugzilla.mozilla.org/show_bug.cgi?id=226669x_refsource_CONFIRM
bugzilla.mozilla.orghttp://bugzilla.mozilla.org/show_bug.cgi?id=258005x_refsource_CONFIRM
exchange.xforce.ibmcloud.commozilla-netscape-nonascii-bo(17378)https://exchange.xforce.ibmcloud.com/vulnerabilities/17378vdb-entryx_refsource_XF
www.mozilla.orghttp://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3x_refsource_CONFIRM
security.gentoo.orgGLSA-200409-26http://security.gentoo.org/glsa/glsa-200409-26.xmlvendor-advisoryx_refsource_GENTOO
www.us-cert.govTA04-261Ahttp://www.us-cert.gov/cas/techalerts/TA04-261A.htmlthird-party-advisoryx_refsource_CERT
marc.infoSSRT4826http://marc.info/?l=bugtraq&m=109698896104418&w=2vendor-advisoryx_refsource_HP