CVE-2004-0722 Integer overflow in n/a

Critical 10.0 Published 3 Aug 2004 Updated 8 Aug 2024

Remote attackers can execute arbitrary code via integer overflow in SOAPParameter constructor, requiring user interaction to view malicious content.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2004-0722?

CVE-2004-0722 is a critical vulnerability in Mozilla Mozilla, published on 3 Aug 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.

Which versions are affected by CVE-2004-0722?

It affects 2 products.

Products include Mozilla Mozilla, Netscape Navigator.

How do I fix CVE-2004-0722?

No fix has been published for CVE-2004-0722 yet. Limit exposure of the affected software until one is available.

Is CVE-2004-0722 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-0722 exists.

Public exploit code: 1 Exploit-DB entry.

All Mozilla Mozilla vulnerabilities

Sources

Also known as GHSA-5gh9-26h7-pwh7.