CVE:CVE-2004-0904
CNNVD:CNNVD-200412-656
Mozilla Firefox Preview Release之前版本，Mozilla 1.7.3之前版本，以及Thunderbird 0.8之前版本中的位图(BMP)译码存在整数溢出漏洞。远程攻击者可以借助触发基于堆的缓冲区溢出的宽位图文件执行任意代码。
solution:Upgrade mozilla firefox to a higher version than 0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,and avoid the version 0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3; Upgrade mozilla mozilla to a higher version than 1.7,1.7:rc3,1.7.1,1.7.2,and avoid the version 1.7,1.7:rc3,1.7.1,1.7.2; Upgrade mozilla thunderbird to a higher version than 0.6,0.7,0.7.1,0.7.2,0.7.3,and avoid the version 0.6,0.7,0.7.1,0.7.2,0.7.3; Upgrade netscape navigator to a higher version than 7.0,7.0.2,7.1,7.2,and avoid the version 7.0,7.0.2,7.1,7.2; Upgrade conectiva linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,and avoid the version 2.1,3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat fedora_core to a higher version than core_1.0,and avoid the version core_1.0; Upgrade redhat linux to a higher version than 7.3,9.0,and avoid the version 7.3,9.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1