CVE-2004-0722

critical

Description

Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9378

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4629

https://exchange.xforce.ibmcloud.com/vulnerabilities/16862

http://www.securityfocus.com/bid/15495

http://www.redhat.com/support/errata/RHSA-2004-421.html

http://www.novell.com/linux/security/advisories/2004_36_mozilla.html

http://www.idefense.com/application/poi/display?id=117&type=vulnerabilities

http://bugzilla.mozilla.org/show_bug.cgi?id=236618

Details

Source: Mitre, NVD

Published: 2004-08-18

Updated: 2017-10-11

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H