CVE-2004-0757

Published: Aug 18, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.

Affected (3)

Products: Mozilla: Firefox, Mozilla, Thunderbird

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 0.9
Mozilla Mozilla	Up to 1.7
Mozilla Thunderbird	Up to 0.7

References (24)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt (unsafe URL)

Source: cve@mitre.org

http://bugzilla.mozilla.org/show_bug.cgi?id=229374

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=109900315219363&w=2

Source: cve@mitre.org

http://secunia.com/advisories/10856

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/561022

Source: cve@mitre.org

US Government Resource

http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2004_36_mozilla.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-421.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/15495

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16869

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11042

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3250

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt (unsafe URL)