CVEvulnerability
CVE-2004-0764
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-08-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
Affected configurations
• mozilla firefox (<= 0.9)
• mozilla mozilla (<= 1.7)
• mozilla thunderbird (<= 0.7)
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt ftp.sco.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=244965 Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=109900315219363&w=2 marc.info
- http://secunia.com/advisories/12188 secunia.com
- http://www.kb.cert.org/vuls/id/262350 US Government Resource
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 www.mozilla.org
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2004-421.html www.redhat.com
- http://www.securityfocus.com/bid/10832 www.securityfocus.com
- http://www.securityfocus.com/bid/15495 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16837 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2418 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9419 oval.cisecurity.org
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt ftp.sco.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=244965 Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=109900315219363&w=2 marc.info
- http://secunia.com/advisories/12188 secunia.com
- http://www.kb.cert.org/vuls/id/262350 US Government Resource
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 www.mozilla.org
- http://www.novell.com/linux/security/advisories/2004_36_mozilla.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2004-421.html www.redhat.com
- http://www.securityfocus.com/bid/10832 www.securityfocus.com
- http://www.securityfocus.com/bid/15495 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16837 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2418 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9419 oval.cisecurity.org