CVE

Id
9334  
CVE No.
CVE-2004-0906  
Status
Candidate  
Description
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.  
Phase
Assigned (20040923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62064 9334 CVE-2004-0906 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3  View
62065 9334 CVE-2004-0906 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=235781  View
62066 9334 CVE-2004-0906 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=231083  View
62067 9334 CVE-2004-0906 GENTOO:GLSA-200409-26  View
62068 9334 CVE-2004-0906 URL:http://security.gentoo.org/glsa/glsa-200409-26.xml  View
62069 9334 CVE-2004-0906 REDHAT:RHSA-2005:323  View
62070 9334 CVE-2004-0906 URL:http://www.redhat.com/support/errata/RHSA-2005-323.html  View
62071 9334 CVE-2004-0906 SUSE:SUSE-SA:2004:036  View
62072 9334 CVE-2004-0906 URL:http://www.novell.com/linux/security/advisories/2004_36_mozilla.html  View
62073 9334 CVE-2004-0906 CERT-VN:VU#653160  View
62074 9334 CVE-2004-0906 URL:http://www.kb.cert.org/vuls/id/653160  View
62075 9334 CVE-2004-0906 BID:11192  View
62076 9334 CVE-2004-0906 URL:http://www.securityfocus.com/bid/11192  View
62077 9334 CVE-2004-0906 OVAL:oval:org.mitre.oval:def:11668  View
62078 9334 CVE-2004-0906 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11668  View
62079 9334 CVE-2004-0906 XF:mozilla-insecure-file-permissions(17375)  View
62080 9334 CVE-2004-0906 URL:http://xforce.iss.net/xforce/xfdb/17375  View
62081 9334 CVE-2004-0906 SECUNIA:12526  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63058 JVNDB-2004-000400 Mozilla 製品の Linux 版アーカイブにおける不適切なパーミッション設定の問題 Linux 版の .tar.gz アーカイブに含まれる特定のファイルのパーミッションとオーナーが誤って設定されている問題があります。 CVE-2004-0907 9334 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000400.html  View