CVE-2004-0762

Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4403

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10032

https://exchange.xforce.ibmcloud.com/vulnerabilities/16623

http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/

http://www.securityfocus.com/bid/15495

http://www.redhat.com/support/errata/RHSA-2004-421.html

http://www.novell.com/linux/security/advisories/2004_36_mozilla.html

http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7

http://secunia.com/advisories/11999/

http://marc.info/?l=bugtraq&m=109900315219363&w=2

http://bugzilla.mozilla.org/show_bug.cgi?id=162020

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS