NVD

Id
71312  
Name
CVE-2004-0909  
Description
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-0909  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368626 71312 CVE-2004-0909 http://bugzilla.mozilla.org/show_bug.cgi?id=253942  View
368627 71312 CVE-2004-0909 SSRT4826  View
368628 71312 CVE-2004-0909 GLSA-200409-26  View
368629 71312 CVE-2004-0909 VU#113192  View
368630 71312 CVE-2004-0909 http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3  View
368631 71312 CVE-2004-0909 SUSE-SA:2004:036  View
368632 71312 CVE-2004-0909 mozilla-enableprivilege-modify-dialog(17377)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63060 JVNDB-2004-000402 Mozilla 製品におけるセキュリティ関連のダイアログメッセージを改ざんされる脆弱性 Mozilla への機能追加を要求する信頼済みスクリプトは、ユーザが誤解するようなわかりづらい許可ダイアログを表示させることが可能な問題があります。 CVE-2004-0909 9336 CVE-2004-0909 71312 5.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000402.html 2004-09-17 2007-04-01 View