PT-2004-1841 · Mozilla · Firefox

Published 2004-08-03 · Updated 2017-10-11 · CVE-2004-0763

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 0.9.1 through 0.9.2

Description The issue allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the onunload method.

Recommendations For Mozilla Firefox versions 0.9.1 through 0.9.2, consider disabling Javascript as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-0763

Affected Products

Firefox

References · 18

• 🔥 https://exploit-db.com/exploits/24312 · Exploit
• 🔥 https://exploit-db.com/exploits/24069 · Exploit
• http://marc.info/?l=bugtraq&m=109900315219363&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0763 · Security Note
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt · Vendor Advisory
• http://secunia.com/advisories/12160 · Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=253121 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200408-22.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2004_36_mozilla.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-421.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16796 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3989 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9436 · Note
• http://marc.info/?l=bugtraq&m=109087067730938&w=2 · Note
• http://cipher.org.uk/index.php?p=advisories/Certificate_Spoofing_Mozilla_FireFox_25-07-2004.advisory · Note