CVE-2004-0757: Mozilla Firefox

High severity, CVSS 10.0. EPSS: 5.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.

Affected products

• Mozilla Firefox: up to and including 0.9
• Mozilla Mozilla: up to and including 1.7
• Mozilla Thunderbird: up to and including 0.7

Published 2004-08-18. Last modified 2026-06-16.