CVE-2004-0904
No fix known EPSS 8%
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
Products: mozilla firefox, mozilla, mozilla thunderbird, netscape navigator, conectiva linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux, redhat linux_advanced_workstation