Lucene search

MitreCVE-2004-1316

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-1316

2004-12-3105:00:00

mitre

web.nvd.nist.gov

security

vulnerability

buffer overflow

denial of service

mozilla

cve-2004-1316

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

Low

EPSS

0.058

Percentile

93.5%

JSON

Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '' (backslash) character, which prevents a string from being NULL terminated.

Affected configurations

Nvd

Node

mozillamozilla

mozillamozillaMatch1.3

mozillamozillaMatch1.4

mozillamozillaMatch1.4alpha

mozillamozillaMatch1.4.1

mozillamozillaMatch1.5

mozillamozillaMatch1.5alpha

mozillamozillaMatch1.5rc1

mozillamozillaMatch1.5rc2

mozillamozillaMatch1.5.1

mozillamozillaMatch1.6

mozillamozillaMatch1.6alpha

mozillamozillaMatch1.6beta

mozillamozillaMatch1.7

mozillamozillaMatch1.7alpha

mozillamozillaMatch1.7beta

mozillamozillaMatch1.7rc1

mozillamozillaMatch1.7rc2

mozillamozillaMatch1.7rc3

mozillamozillaMatch1.7.1

mozillamozillaMatch1.7.2

mozillamozillaMatch1.7.3

VendorProductVersionCPE
mozillamozilla*cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*
mozillamozilla1.3cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*
mozillamozilla1.4cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*
mozillamozilla1.4cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*
mozillamozilla1.4.1cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*
mozillamozilla1.5cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*
mozillamozilla1.5cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*
mozillamozilla1.5cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*
mozillamozilla1.5cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*
mozillamozilla1.5.1cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	mozilla	*	cpe:2.3:a:mozilla:mozilla::::::::
mozilla	mozilla	1.3	cpe:2.3:a:mozilla:mozilla:1.3:::::::*
mozilla	mozilla	1.4	cpe:2.3:a:mozilla:mozilla:1.4:::::::*
mozilla	mozilla	1.4	cpe:2.3:a:mozilla:mozilla:1.4:alpha::::::
mozilla	mozilla	1.4.1	cpe:2.3:a:mozilla:mozilla:1.4.1:::::::*
mozilla	mozilla	1.5	cpe:2.3:a:mozilla:mozilla:1.5:::::::*
mozilla	mozilla	1.5	cpe:2.3:a:mozilla:mozilla:1.5:alpha::::::
mozilla	mozilla	1.5	cpe:2.3:a:mozilla:mozilla:1.5:rc1::::::
mozilla	mozilla	1.5	cpe:2.3:a:mozilla:mozilla:1.5:rc2::::::
mozilla	mozilla	1.5.1	cpe:2.3:a:mozilla:mozilla:1.5.1:::::::*