CVE-2004-0762: Medium severity Mozilla Thunderbird vulnerability
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0762?
CVE-2004-0762 is considered a moderate vulnerability due to its potential to allow arbitrary extension installation.
How do I fix CVE-2004-0762?
To fix CVE-2004-0762, update Mozilla, Firefox, or Thunderbird to versions that are beyond the vulnerable releases: Mozilla 1.7.1, Firefox 0.9.1, or Thunderbird 0.7.1.
What systems are affected by CVE-2004-0762?
CVE-2004-0762 affects Mozilla versions before 1.7, Firefox versions before 0.9, and Thunderbird versions before 0.7.
What type of attack does CVE-2004-0762 enable?
CVE-2004-0762 enables an attacker to manipulate the XPInstall Security dialog box to install malicious extensions.
Is there a workaround for CVE-2004-0762?
While updating to the latest software versions is the best resolution for CVE-2004-0762, users can also disable extension installation in their browser settings as a temporary workaround.