CVE-2004-0978

Published: Feb 9, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.

Affected (5)

Products: Microsoft: Internet Explorer

Microsoft

1 product

Internet Explorer

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 5.01 sp3
Microsoft Internet Explorer	Version 5.01 sp4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 5.5 sp2

Configuration C

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6

Running on/with	Platform Versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Configuration D

1 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6 sp1

Running on/with	Platform Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 98se	All versions
Microsoft Windows Me	All versions
Microsoft Windows Nt	Version 4.0 sp6
Microsoft Windows Nt	Version 4.0 sp6a
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions