CVE-2004-0478: Mozilla

Low severity, CVSS 2.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.

Affected products

• Mozilla Mozilla: any version

Published 2004-07-07. Last modified 2026-06-16.