CVE-2004-0978

Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.

• CWE-787

• http://marc.info/?l=bugtraq&m=110616221411579&w=2Issue Tracking, Third Party Advisory
• http://www.kb.cert.org/vuls/id/673134Third Party Advisory, US Government Resource
• http://www.ngssoftware.com/advisories/heartbeatfull.txtBroken Link
• http://www.securityfocus.com/bid/11367Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17714Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=110616221411579&w=2Issue Tracking, Third Party Advisory
• http://www.kb.cert.org/vuls/id/673134Third Party Advisory, US Government Resource
• http://www.ngssoftware.com/advisories/heartbeatfull.txtBroken Link
• http://www.securityfocus.com/bid/11367Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17714Third Party Advisory, VDB Entry

Published

Feb 9, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0972The lvmcreate_initrd script in the lvm package in Trustix Se…
• CVE-2004-0973Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-0974The netatalk package in Trustix Secure Linux 1.5 through 2.1…
• CVE-2004-0975The der_chop script in the openssl package in Trustix Secure…
• CVE-2004-0976Multiple scripts in the perl package in Trustix Secure Linux…
• CVE-2004-0977The make_oidjoins_check script in PostgreSQL 7.4.5 and earli…
• CVE-2004-0979Internet Explorer on Windows XP does not properly modify the…
• CVE-2004-0980Format string vulnerability in ez-ipupdate.c for ez-ipupdate…
• CVE-2004-0981Buffer overflow in the EXIF parsing routine in ImageMagick b…
• CVE-2004-0982Buffer overflow in the getauthfromURL function in httpget.c …
• CVE-2004-0983The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.…
• CVE-2004-0984Unknown vulnerability in the dotlock implementation in mailu…