CVE-2004-0764

Published: Aug 18, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.

Affected (3)

Products: Mozilla: Firefox, Mozilla, Thunderbird

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 0.9
Mozilla Mozilla	Up to 1.7
Mozilla Thunderbird	Up to 0.7

References (26)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt (unsafe URL)

Source: cve@mitre.org

http://bugzilla.mozilla.org/show_bug.cgi?id=244965

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=109900315219363&w=2

Source: cve@mitre.org

http://secunia.com/advisories/12188

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/262350

Source: cve@mitre.org

US Government Resource

http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2004_36_mozilla.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-421.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/10832

Source: cve@mitre.org

http://www.securityfocus.com/bid/15495

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16837

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2418

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9419

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt (unsafe URL)