CVE-2004-0478
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Mozilla未知的版本存在漏洞。远程攻击者使用无限循环的Javascript导致服务拒绝（高CPU/RAM消耗），该漏洞可能是插入控制字符，已经证明使用嵌入ctrl-U。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2004-0478
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Mozilla漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mozilla未知的版本存在漏洞。远程攻击者使用无限循环的Javascript导致服务拒绝（高CPU/RAM消耗），该漏洞可能是插入控制字符，已经证明使用嵌入ctrl-U。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2004-0478
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-0478
请登录查看更多情报信息。
Vendor Advisories for CVE-2004-0478 (2)
-
http://bugzilla.mozilla.org/show_bug.cgi?id=243540 x_refsource_CONFIRM
-
Mailing List Discussions for CVE-2004-0478 (1)
-
http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html mailing-list x_refsource_MLIST
Same Patch Batch · n/a · 2004-05-20 · 18 CVEs total
| CVE-2004-0470 | BEA WebLogic Server 和WebLogic Express漏洞 | |
| CVE-2004-0484 | Microsoft Internet Explorer 安全漏洞 | |
| CVE-2004-0483 | SGI IRIX rpc.mountd远程拒绝服务漏洞 | |
| CVE-2004-0482 | OpenBSD多重整数溢出漏洞 | |
| CVE-2004-0479 | Microsoft Internet Explorer http-equiv Meta标记拒绝服务漏洞 | |
| CVE-2004-0475 | Microsoft Internet Explorer双反斜线CHM文件执行漏洞 | |
| CVE-2004-0474 | Microsoft Windows XP HCP URI Handler任意命令执行漏洞 | |
| CVE-2004-0473 | Opera Software Opera 参数参数注入漏洞 | |
| CVE-2004-0471 | BEA WebLogic服务器和WebLogic Express漏洞 | |
| CVE-2002-1580 | Cyrus IMAPD Pre-Login堆破坏漏洞 | |
| CVE-2004-0459 | IEEE 802.11无线协议漏洞 | |
| CVE-2004-0445 | Symantec Client Firewall远程域名服务器响应服务拒绝漏洞 | |
| CVE-2004-0444 | Symantec Client Firewall NETBIOS处理远程堆溢出漏洞 | |
| CVE-2004-0411 | KDE Konqueror 输入验证错误漏洞 | |
| CVE-2004-0398 | Neon WebDAV客户端库缓冲区错误漏洞 | |
| CVE-2004-0396 | CVS多次Entry已被修改或未被修改标记插入操作堆溢出漏洞 | |
| CVE-2003-1041 | Microsoft Internet Explorer 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2004-0478
No comments yet