CVE-2004-0757

CVE-2004-0757 describes a critical heap-based buffer overflow vulnerability in the POP3 capability of Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7. This flaw allows a malicious POP3 mail server to execute arbitrary code on a vulnerable client. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.