CVEvulnerability
CVE-2004-0762
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-08-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.
Affected configurations
• mozilla firefox (<= 0.9)
• mozilla mozilla (<= 1.7)
• mozilla thunderbird (<= 0.7)
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt ftp.sco.com
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html archives.neohapsis.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=162020 Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=109900315219363&w=2 marc.info
- http://secunia.com/advisories/11999/ secunia.com
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 www.mozilla.org
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2004-421.html www.redhat.com
- http://www.securityfocus.com/bid/15495 www.securityfocus.com
- http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/ www.squarefree.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16623 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10032 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4403 oval.cisecurity.org
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt ftp.sco.com
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html archives.neohapsis.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=162020 Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=109900315219363&w=2 marc.info
- http://secunia.com/advisories/11999/ secunia.com
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 www.mozilla.org
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2004-421.html www.redhat.com
- http://www.securityfocus.com/bid/15495 www.securityfocus.com
- http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/ www.squarefree.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16623 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10032 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4403 oval.cisecurity.org