CVE-2004-0765: High severity Mozilla Thunderbird vulnerability
The certTestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0765?
CVE-2004-0765 is considered a moderate severity vulnerability due to its potential to allow spoofing of trusted certificates.
How do I fix CVE-2004-0765?
To mitigate CVE-2004-0765, upgrade to Mozilla, Firefox, or Thunderbird versions that are newer than those specified in the vulnerability.
What software is affected by CVE-2004-0765?
CVE-2004-0765 affects Mozilla before version 1.7, Firefox before version 0.9, and Thunderbird before version 0.7.
What kind of attacks can exploit CVE-2004-0765?
CVE-2004-0765 can be exploited by remote attackers leveraging improperly validated hostnames to spoof trusted certificates.
Is CVE-2004-0765 present in the latest browser versions?
CVE-2004-0765 is not present in the latest versions of Mozilla, Firefox, or Thunderbird as they have patched this vulnerability.