VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 27, 2005· Updated Jun 16, 2026

CVE-2004-0903

CVE-2004-0903

Description

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

37
  • Mozilla Corporation/Mozilla4 versions
    cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*
    • (no CPE)range: < 1.7.3
  • Mozilla Corporation/Thunderbird5 versions
    cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*
    • (no CPE)range: < 0.8
  • Conectiva/Linux2 versions
    cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server9 versions
    cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*+ 8 more
    • cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*
  • Red Hat/Enterprise Linux Desktop
    cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
  • Red Hat/Fedora Core
    cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*
  • Red Hat/Linux4 versions
    cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*
    • cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*
    • cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*
  • Red Hat/Linux Advanced Workstation2 versions
    cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*
    • cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*
  • SUSE S.A./Linux8 versions
    cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*+ 7 more
    • cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*
    • cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*
  • Mozilla Corporation/Firefoxllm-fuzzy

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.