CVE:CVE-2004-0903
CNNVD:CNNVD-200501-291
Mozilla是著名的浏览器软件。
多个Mozilla浏览器(Firefox预览版之前的版本、Mozilla 1.7.3之前的版本及 Thunderbird 0.8之前版本)中nsVCardObj.cpp的wirteGroup函数存在堆栈溢出漏洞。远程攻击者可使用畸形VCard附件，导致在预览信息时不能被正确处理，从而可执行任意代码。
solution:Upgrade mozilla mozilla to a higher version than 1.7,1.7.1,1.7.2,and avoid the version 1.7,1.7.1,1.7.2; Upgrade mozilla thunderbird to a higher version than 0.7,0.7.1,0.7.2,0.7.3,and avoid the version 0.7,0.7.1,0.7.2,0.7.3; Upgrade conectiva linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,and avoid the version 2.1,3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat fedora_core to a higher version than core_1.0,and avoid the version core_1.0; Upgrade redhat linux to a higher version than 7.3,9.0,and avoid the version 7.3,9.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1; Upgrade suse suse_linux to a higher version than 1.0,8,8.1,8.2,9.0,9.1,and avoid the version 1.0,8,8.1,8.2,9.0,9.1