CVE

Id
9192  
CVE No.
CVE-2004-0764  
Status
Candidate  
Description
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.  
Phase
Assigned (20040802)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60212 9192 CVE-2004-0764 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=244965  View
60213 9192 CVE-2004-0764 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7  View
60214 9192 CVE-2004-0764 FEDORA:FLSA:2089  View
60215 9192 CVE-2004-0764 URL:http://marc.info/?l=bugtraq&m=109900315219363&w=2  View
60216 9192 CVE-2004-0764 REDHAT:RHSA-2004:421  View
60217 9192 CVE-2004-0764 URL:http://www.redhat.com/support/errata/RHSA-2004-421.html  View
60218 9192 CVE-2004-0764 SCO:SCOSA-2005.49  View
60219 9192 CVE-2004-0764 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt  View
60220 9192 CVE-2004-0764 SUSE:SUSE-SA:2004:036  View
60221 9192 CVE-2004-0764 URL:http://www.novell.com/linux/security/advisories/2004_36_mozilla.html  View
60222 9192 CVE-2004-0764 CERT-VN:VU#262350  View
60223 9192 CVE-2004-0764 URL:http://www.kb.cert.org/vuls/id/262350  View
60224 9192 CVE-2004-0764 BID:10832  View
60225 9192 CVE-2004-0764 URL:http://www.securityfocus.com/bid/10832  View
60226 9192 CVE-2004-0764 BID:15495  View
60227 9192 CVE-2004-0764 URL:http://www.securityfocus.com/bid/15495  View
60228 9192 CVE-2004-0764 OVAL:oval:org.mitre.oval:def:2418  View
60229 9192 CVE-2004-0764 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2418  View
60230 9192 CVE-2004-0764 OVAL:oval:org.mitre.oval:def:9419  View
60231 9192 CVE-2004-0764 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9419  View
60232 9192 CVE-2004-0764 SECUNIA:12188  View
60233 9192 CVE-2004-0764 URL:http://secunia.com/advisories/12188  View
60234 9192 CVE-2004-0764 XF:mozilla-user-interface-spoofing(16837)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62971 JVNDB-2004-000313 Mozilla 製品の不完全なドメインの証明書チェックに関するなりすましの脆弱性 Mozilla 製品で使用される cert_TestHostName() 関数には、URI のホスト名のチェックに不備が存在するため、FQDN (完全修飾ドメイン名) ではないドメイン名を使用した場合に、信頼できる認証が偽装される可能性があります。 CVE-2004-0765 9192 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000313.html  View