VULNERABILITY INTELLIGENCE
CVE-2004-0903
CVSS score10 HIGH
EPSS probability9.75%
CISA KEVNot currently listed
Published2005-01-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Third Party Advisory, US Government Resource
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — US Government Resource
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory