CVE

Id
9190  
CVE No.
CVE-2004-0762  
Status
Candidate  
Description
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.  
Phase
Assigned (20040802)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60164 9190 CVE-2004-0762 FULLDISC:20040407 Race conditions in security dialogs  View
60165 9190 CVE-2004-0762 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html  View
60166 9190 CVE-2004-0762 MISC:http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/  View
60167 9190 CVE-2004-0762 SCO:SCOSA-2005.49  View
60168 9190 CVE-2004-0762 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt  View
60169 9190 CVE-2004-0762 BID:15495  View
60170 9190 CVE-2004-0762 URL:http://www.securityfocus.com/bid/15495  View
60171 9190 CVE-2004-0762 OVAL:oval:org.mitre.oval:def:4403  View
60172 9190 CVE-2004-0762 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4403  View
60173 9190 CVE-2004-0762 OVAL:oval:org.mitre.oval:def:10032  View
60174 9190 CVE-2004-0762 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10032  View
60175 9190 CVE-2004-0762 SECUNIA:11999  View
60176 9190 CVE-2004-0762 URL:http://secunia.com/advisories/11999/  View
60177 9190 CVE-2004-0762 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=162020  View
60178 9190 CVE-2004-0762 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7  View
60179 9190 CVE-2004-0762 FEDORA:FLSA:2089  View
60180 9190 CVE-2004-0762 URL:http://marc.info/?l=bugtraq&m=109900315219363&w=2  View
60181 9190 CVE-2004-0762 REDHAT:RHSA-2004:421  View
60182 9190 CVE-2004-0762 URL:http://www.redhat.com/support/errata/RHSA-2004-421.html  View
60183 9190 CVE-2004-0762 SUSE:SUSE-SA:2004:036  View
60184 9190 CVE-2004-0762 URL:http://www.novell.com/linux/security/advisories/2004_36_mozilla.html  View
60185 9190 CVE-2004-0762 XF:mozilla-dialog-code-execution(16623)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62970 JVNDB-2004-000312 Mozilla 製品 の OnUnload ハンドラによる SSL 証明書を偽装される脆弱性 Mozilla 製品には、リダイレクトおよび OnUnload ハンドラを使用した意図的に作成した JavaScript を利用することにより、信頼できる Web サイトの SSL 証明書を不正に流用できてしまう問題があります。 CVE-2004-0763 9190 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000312.html  View