CVE-2004-0762

Published: Aug 18, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.

Affected (3)

Products: Mozilla: Firefox, Mozilla, Thunderbird

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 0.9
Mozilla Mozilla	Up to 1.7
Mozilla Thunderbird	Up to 0.7

References (26)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html

Source: cve@mitre.org

http://bugzilla.mozilla.org/show_bug.cgi?id=162020

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=109900315219363&w=2

Source: cve@mitre.org

http://secunia.com/advisories/11999/

Source: cve@mitre.org

http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2004_36_mozilla.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-421.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/15495

Source: cve@mitre.org

http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16623

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10032

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4403

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt (unsafe URL)