VULNERABILITY INTELLIGENCE
CVE-2004-0978
CVSS score10 HIGH
EPSS probability38.31%
CISA KEVNot currently listed
Published2005-02-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.
Weakness classification
- CWE-787: Out-of-bounds Write
Primary references
- cve@mitre.org — Issue Tracking, Third Party Advisory
- cve@mitre.org — Third Party Advisory, US Government Resource
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry