PT-2004-1939 · Mozilla · Firefox+2

Harald Milz · Publicado 2004-09-24 · Atualizado 2017-07-11 · CVE-2004-0907

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to Preview Release Mozilla versions prior to 1.7.3 Thunderbird versions prior to 0.8

Description: The issue allows local users to overwrite certain files and execute arbitrary code due to insecure permissions in the Linux install .tar.gz archives.

Recommendations: For Mozilla Firefox versions prior to Preview Release, update to the Preview Release or later to resolve the issue. For Mozilla versions prior to 1.7.3, update to version 1.7.3 or later to resolve the issue. For Thunderbird versions prior to 0.8, update to version 0.8 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0907

Produtos afetados

Mozilla Firefox

Firefox

Thunderbird

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-0907 · Nota de Segurança
• http://mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 · Nota
• http://security.gentoo.org/glsa/glsa-200409-26.xml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17373 · Nota
• http://bugzilla.mozilla.org/show_bug.cgi?id=254303 · Correção