CVE-2004-0764 Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 0.9 | No fix listed |
| mozilla | <= 1.7 | No fix listed |
| mozilla Thunderbird | <= 0.7 | No fix listed |
References
- bugzilla.mozilla.org patch vendor-advisory
- FLSA:2089 vendor-advisory
- 12188 third-party-advisory
- VU#262350 third-party-advisory us-government-resource
- www.mozilla.org
- SUSE-SA:2004:036 vendor-advisory
- RHSA-2004:421 vendor-advisory
- 10832 vdb-entry
- 15495 vdb-entry
- mozilla-user-interface-spoofing(16837) vdb-entry
- oval:org.mitre.oval:def:2418 signature vdb-entry
- oval:org.mitre.oval:def:9419 signature vdb-entry