CVE-2004-0909: Mozilla vulnerability
Vendor fix available · Affected: Mozilla · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 77% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Mozilla
- Published
- September 2004
CoverageNo articles yet
No CyberSIXT article names CVE-2004-0909 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.
References
- NVD entrynvd.nist.gov
- CVE recordcve.org
- Vendor advisorynovell.com
- Vendor advisorysecurity.gentoo.org
- Vendor advisorymarc.info
- bugzilla.mozilla.org/show_bug.cgi?id=253942bugzilla.mozilla.org
- Third-party advisorykb.cert.org
- mozilla.org/projects/security/known-vulnerabilities.html#mozillamozilla.org
- exchange.xforce.ibmcloud.com/vulnerabilities/17377exchange.xforce.ibmcloud.com
- Third-party advisorysecunia.com