Vulnerability Note VU#847200

Mozilla contains integer overflows in bitmap image decoder

Original Release date: 17 Sep 2004 | Last revised: 17 Sep 2004

Overview

A vulnerability in the way Mozilla and its derived programs handle certain bitmap images could allow a remote attacker to execute arbitrary code on a vulnerable system.

Description

The Mozilla web browser and related Mozilla products support the ability to natively display a number of image formats. Multiple integer overflow errors exist in the way that some versions of these products handle bitmap images (.bmp). These errors result in various vulnerabilities when the affected application handles overly wide bitmap files. An attacker with the ability to supply a specially crafted bitmap image to the affected application may be able to exploit these vulnerabilities. Such malicious images could be supplied remotely in a web page or in an email message.

Impact

The impacts of these vulnerabilities vary depending on what system the software is running on. In some cases, a remote attacker may be able to execute arbitrary code with the privileges of the user running an affected program. In other cases, an attacker may be able to cause the affected program to crash.

Solution

Upgrade to a fixed version of the affected software

The Mozilla Project has released new versions of the affected software that include patches for this vulnerability. Please see the Systems Affected section of this document for more information.

Workarounds


Users who are unable to upgrade to a patched version of the software are encouraged to disable image loading in their affected product.

Systems Affected (Learn More)

VendorStatusDate NotifiedDate Updated
MozillaAffected-17 Sep 2004
If you are a vendor and your product is affected, let us know.

CVSS Metrics (Learn More)

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A N/A

References

Credit

Information about this issue was originally published by the Mozilla Project. The Mozilla Project, in turn, credits GaŽl Delalleau with the discovery and reporting of this issue.

This document was written by Chad R Dougherty.

Other Information

  • CVE IDs: Unknown
  • Date Public: 14 Sep 2004
  • Date First Published: 17 Sep 2004
  • Date Last Updated: 17 Sep 2004
  • Severity Metric: 23.14
  • Document Revision: 8

Feedback

If you have feedback, comments, or additional information about this vulnerability, please send us email.