CVE-2004-0902
No CVSS score yet. EPSS 10% chance of exploitation in the next 30 days.
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.
- EPSS
- 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- conectiva:linux
- mozilla:mozilla
- mozilla:thunderbird
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:fedora_core
- redhat:linux
- redhat:linux_advanced_workstation
- suse:suse_linux