Back to search
CVE-2004-0909
Published: Sep 24, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://bugzilla.mozilla.org/show_bug.cgi?id=253942
x_refsource_CONFIRM
SUSE-SA:2004:036
vendor-advisory
x_refsource_SUSE
VU#113192
third-party-advisory
x_refsource_CERT-VN
GLSA-200409-26
vendor-advisory
x_refsource_GENTOO
mozilla-enableprivilege-modify-dialog(17377)
vdb-entry
x_refsource_XF
SSRT4826
vendor-advisory
x_refsource_HP
12526
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now