FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0762

This CVE name corresponds to:

Entered	Topic
2004-09-30	mozilla -- users may be lured into bypassing security dialogs

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0762 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0762
Phase	Assigned(20040802)

Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.

References

Source	Reference
FULLDISC	20040407 Race conditions in security dialogs
MISC	http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/
SCO	SCOSA-2005.49
BID	15495
OVAL	oval:org.mitre.oval:def:4403
OVAL	oval:org.mitre.oval:def:10032
SECUNIA	11999
CONFIRM	http://bugzilla.mozilla.org/show_bug.cgi?id=162020
CONFIRM	http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
FEDORA	FLSA:2089
REDHAT	RHSA-2004:421
SUSE	SUSE-SA:2004:036
XF	mozilla-dialog-code-execution(16623)