CVE-2004-0904
No CVSS score yet. EPSS 8.0% chance of exploitation in the next 30 days.
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
- EPSS
- 8.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- conectiva:linux
- mozilla:firefox
- mozilla:mozilla
- mozilla:thunderbird
- netscape:navigator
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:fedora_core
- redhat:linux
- redhat:linux_advanced_workstation