CVE-2004-0909 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2004-0909
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0909

Description: Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/17377 SUSE http://www.novell.com/linux/security/advisories/2004_36_mozilla.html SAID Secunia Advisory: SA12526 HP http://marc.theaimsgroup.com/?l=bugtraq&m=109698896104418&w=2 GENTOO http://security.gentoo.org/glsa/glsa-200409-26.xml CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 http://bugzilla.mozilla.org/show_bug.cgi?id=253942 CERT-VN 113192

Return to the previous page.