NVD

Id
71309  
Name
CVE-2004-0906  
Description
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-0906  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368602 71309 CVE-2004-0906 http://bugzilla.mozilla.org/show_bug.cgi?id=231083  View
368603 71309 CVE-2004-0906 http://bugzilla.mozilla.org/show_bug.cgi?id=235781  View
368604 71309 CVE-2004-0906 oval:org.mitre.oval:def:11668  View
368605 71309 CVE-2004-0906 GLSA-200409-26  View
368606 71309 CVE-2004-0906 VU#653160  View
368607 71309 CVE-2004-0906 http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3  View
368608 71309 CVE-2004-0906 SUSE-SA:2004:036  View
368609 71309 CVE-2004-0906 RHSA-2005:323  View
368610 71309 CVE-2004-0906 11192  View
368611 71309 CVE-2004-0906 mozilla-insecure-file-permissions(17375)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63057 JVNDB-2004-000399 Mozilla 製品の XPInstall における不適切なパーミッション設定の問題 Mozilla 製品には、Linux 版インストーラが不適切なファイルパーミッションを与えて特定のファイルを作成してしまう問題があります。 CVE-2004-0906 9333 CVE-2004-0906 71309 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000399.html 2004-09-17 2007-04-01 View