CVE

Id
9337  
CVE No.
CVE-2004-0909  
Status
Candidate  
Description
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.  
Phase
Assigned (20040923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62106 9337 CVE-2004-0909 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3  View
62107 9337 CVE-2004-0909 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=253942  View
62108 9337 CVE-2004-0909 GENTOO:GLSA-200409-26  View
62109 9337 CVE-2004-0909 URL:http://security.gentoo.org/glsa/glsa-200409-26.xml  View
62110 9337 CVE-2004-0909 HP:SSRT4826  View
62111 9337 CVE-2004-0909 URL:http://marc.info/?l=bugtraq&m=109698896104418&w=2  View
62112 9337 CVE-2004-0909 SUSE:SUSE-SA:2004:036  View
62113 9337 CVE-2004-0909 URL:http://www.novell.com/linux/security/advisories/2004_36_mozilla.html  View
62114 9337 CVE-2004-0909 CERT-VN:VU#113192  View
62115 9337 CVE-2004-0909 URL:http://www.kb.cert.org/vuls/id/113192  View
62116 9337 CVE-2004-0909 SECUNIA:12526  View
62117 9337 CVE-2004-0909 URL:http://secunia.com/advisories/12526  View
62118 9337 CVE-2004-0909 XF:mozilla-enableprivilege-modify-dialog(17377)  View

Related JVN