CVE-2004-0762

N/A Unknown

Published: August 18, 2004 Modified: April 16, 2026

Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html

Source: cve@mitre.org

http://bugzilla.mozilla.org/show_bug.cgi?id=162020

Source: cve@mitre.org

Patch Vendor Advisory

http://marc.info/?l=bugtraq&m=109900315219363&w=2

Source: cve@mitre.org

http://secunia.com/advisories/11999/

Source: cve@mitre.org

http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2004_36_mozilla.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-421.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/15495

Source: cve@mitre.org

http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16623

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10032

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4403

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt