CVE-2004-0764: Critical severity Mozilla Thunderbird vulnerability
Published Aug 3, 2004
·Updated
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
Affected Software
3 affected components
Mozilla Thunderbird<=0.7
Mozilla Firefox<=0.9
Mozilla Mozilla<=1.7
Remediation
Patch Available
Event History
Aug 3, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0764?
CVE-2004-0764 is considered a moderate severity vulnerability due to the potential for user interface hijacking.
2
How do I fix CVE-2004-0764?
To fix CVE-2004-0764, you should update to the latest versions of Mozilla, Firefox, or Thunderbird that are beyond the affected versions.
3
What versions of software are affected by CVE-2004-0764?
Affected versions include Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7.
4
Can CVE-2004-0764 be exploited remotely?
Yes, CVE-2004-0764 can be exploited remotely through manipulated web content.
5
What does the 'chrome' flag in CVE-2004-0764 refer to?
The 'chrome' flag in CVE-2004-0764 allows remote sites to gain access to user interface aspects through XML User Interface Language (XUL) files.