CVE-2004-0478
2.6 · LOWOverview
CVE-2004-0478 is a low-severity vulnerability affecting mozilla mozilla. It was published on July 7, 2004 and has a CVSS 2.0 base score of 2.6 (LOW).
This vulnerability has a CVSS 2.0 base score of 2.6, rated LOW. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
Technical Description
Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.
Remediation
Check the references section for vendor advisories and patches from mozilla. Update mozilla to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|
References
Frequently Asked Questions
What is CVE-2004-0478?
CVE-2004-0478 is a low-severity vulnerability affecting mozilla mozilla. It was published on July 7, 2004 and has a CVSS 2.0 base score of 2.6 (LOW).
How severe is CVE-2004-0478?
This vulnerability has a CVSS 2.0 base score of 2.6, rated LOW. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2004-0478?
Check the references section for vendor advisories and patches from mozilla. Update mozilla to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2004-0478?
CyberStrike's AI-powered security agents can automatically detect CVE-2004-0478 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related LOW CVEs from 2004
View all →netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwr
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the P
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR env
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code vi
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to
Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink att
Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and ea
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world
Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to cre
IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite file
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions ac