CVE-2004-0762

2004-08-1804:00:00

mitre

web.nvd.nist.gov

cve-2004-0762

mozilla

firefox

thunderbird

xpinstall

security

dialog

manipulation

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.011

Percentile

84.2%

JSON

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.

Affected configurations

Nvd

Node

mozillafirefoxRange≤0.9

mozillamozillaRange≤1.7

mozillathunderbirdRange≤0.7

VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillamozilla*cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*
mozillathunderbird*cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::
mozilla	mozilla	*	cpe:2.3:a:mozilla:mozilla::::::::
mozilla	thunderbird	*	cpe:2.3:a:mozilla:thunderbird::::::::