Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/17381 | vdb-entry x_refsource_XF |
| http://www.novell.com/linux/security/advisories/2004_36_mozilla.html | vendor-advisory x_refsource_SUSE |
| http://marc.info/?l=bugtraq&m=109900315219363&w=2 | vendor-advisory x_refsource_FEDORA |
| http://bugzilla.mozilla.org/show_bug.cgi?id=255067 | x_refsource_CONFIRM |
| http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 | x_refsource_CONFIRM |
| http://security.gentoo.org/glsa/glsa-200409-26.xml | vendor-advisory x_refsource_GENTOO |
| http://www.securityfocus.com/bid/11171 | vdb-entry x_refsource_BID |
| http://www.us-cert.gov/cas/techalerts/TA04-261A.html | third-party-advisory x_refsource_CERT |
| http://marc.info/?l=bugtraq&m=109698896104418&w=2 | vendor-advisory x_refsource_HP |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952 | vdb-entry signature x_refsource_OVAL |
| http://www.kb.cert.org/vuls/id/847200 | third-party-advisory x_refsource_CERT-VN |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|