CVE-2004-0478

Published: Jul 7, 2004Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.

Affected (1)

Products: Mozilla: Mozilla

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Mozilla	All versions

Related CWEs

References (6)

http://bugzilla.mozilla.org/show_bug.cgi?id=243540

Source: cve@mitre.org

Vendor Advisory

http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16225

Source: cve@mitre.org

http://bugzilla.mozilla.org/show_bug.cgi?id=243540

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16225

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.