CVE-2004-1613: Mozilla

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.

Affected products

• Mozilla Mozilla: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1 only; version 1.2 only; version 1.2.1 only; …
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only
• Red Hat Fedora Core: version core_1.0 only; version core_2.0 only
• Red Hat Linux: version 7.3 only; version 9.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Sgi Propack: version 3.0 only

Published 2004-10-18. Last modified 2026-06-16.