CVE-2004-1316

Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\' (backslash) character, which prevents a string from being NULL terminated.

• http://isec.pl/vulnerabilities/isec-0020-mozilla.txtExploit, Vendor Advisory
• http://marc.info/?l=bugtraq&m=110436284718949&w=2
• http://marc.info/?l=bugtraq&m=110780717916478&w=2
• http://secunia.com/advisories/19823
• http://www.mozilla.org/security/announce/mfsa2005-06.htmlPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2006_04_25.html
• http://www.redhat.com/support/errata/RHSA-2005-038.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/12131
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18711
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100052
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9808
• http://isec.pl/vulnerabilities/isec-0020-mozilla.txtExploit, Vendor Advisory
• http://marc.info/?l=bugtraq&m=110436284718949&w=2
• http://marc.info/?l=bugtraq&m=110780717916478&w=2
• http://secunia.com/advisories/19823
• http://www.mozilla.org/security/announce/mfsa2005-06.htmlPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2006_04_25.html
• http://www.redhat.com/support/errata/RHSA-2005-038.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/12131
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18711
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100052
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9808

Published

Dec 29, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1310Stack-based buffer overflow in the asf_mmst_streaming.c func…
• CVE-2004-1311Integer overflow in the real_setup_and_get_header function i…
• CVE-2004-1312A bug in the HTML parser in a certain Microsoft HTML library…
• CVE-2004-1313The Smc.exe process in My Firewall Plus 5.0 build 1117, and …
• CVE-2004-1314Safari 1.x allows remote attackers to spoof arbitrary web si…
• CVE-2004-1315viewtopic.php in phpBB 2.x before 2.0.11 improperly URL deco…
• CVE-2004-1317Stack-based buffer overflow in doexec.c in Netcat for Window…
• CVE-2004-1318Cross-site scripting (XSS) vulnerability in namazu.cgi for N…
• CVE-2004-1319The DHTML Edit Control (dhtmled.ocx) allows remote attackers…
• CVE-2004-1320Asante FM2008 running firmware 1.06 is shipped with a defaul…
• CVE-2004-1321The configuration backup in Asante FM2008 running firmware 1…
• CVE-2004-1322Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsof…