01 Record

CVE-2004-1613

Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 1.65% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 74.5% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2005-02-20 05:00Z21 YR AGO
Last updated: 2024-08-08 01:00Z2 YR AGO
Reserved: 2005-02-20
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: 6fa893bc0eaa6ce03455f369d8234290d1863af862c700727974cb3f8677c91d

05 Affected products

VendorProductVersionsPlatforms

mozillamozillaNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatfedora_coreNot specified—

redhatlinuxNot specified—

redhatlinux_advanced_workstationNot specified—

sgipropackNot specified—

06 References

marc.info20041018 Web browsers - a mini-farcehttp://marc.info/?l=bugtraq&m=109811406620511&w=2mailing-listx_refsource_BUGTRAQ
www.securityfocus.com11439http://www.securityfocus.com/bid/11439vdb-entryx_refsource_BID
www.redhat.comRHSA-2005:323http://www.redhat.com/support/errata/RHSA-2005-323.htmlvendor-advisoryx_refsource_REDHAT
exchange.xforce.ibmcloud.commozilla-html-tags-dos(17805)https://exchange.xforce.ibmcloud.com/vulnerabilities/17805vdb-entryx_refsource_XF
oval.cisecurity.orgoval:org.mitre.oval:def:10227https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10227vdb-entrysignaturex_refsource_OVAL
securitytracker.com1011810http://securitytracker.com/id?1011810vdb-entryx_refsource_SECTRACK
lists.grok.org.uk20041018 Web browsers - a mini-farcehttp://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.htmlmailing-listx_refsource_FULLDISC
lcamtuf.coredump.cxhttp://lcamtuf.coredump.cx/mangleme/gallery/x_refsource_MISC

01 Record index

CVE-2004-1613

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2004-1613

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References