Description
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
References
- mozilla-netscape-bmp-bo(17381) vdb-entry
- SUSE-SA:2004:036 vendor-advisory
- FLSA:2089 vendor-advisory
- http://bugzilla.mozilla.org/show_bug.cgi?id=255067
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
- GLSA-200409-26 vendor-advisory
- 11171 vdb-entry
- TA04-261A third-party-advisory
- SSRT4826 vendor-advisory
- oval:org.mitre.oval:def:10952 vdb-entry signature
- VU#847200 third-party-advisory