PT-2004-1939 · Mozilla · Firefox+2

Harald Milz · Published 2004-09-24 · Updated 2017-07-11 · CVE-2004-0907

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to Preview Release Mozilla versions prior to 1.7.3 Thunderbird versions prior to 0.8

Description: The issue allows local users to overwrite certain files and execute arbitrary code due to insecure permissions in the Linux install .tar.gz archives.

Recommendations: For Mozilla Firefox versions prior to Preview Release, update to the Preview Release or later to resolve the issue. For Mozilla versions prior to 1.7.3, update to version 1.7.3 or later to resolve the issue. For Thunderbird versions prior to 0.8, update to version 0.8 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-0907

Affected Products

Mozilla Firefox

Firefox

Thunderbird

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-0907 · Security Note
• http://security.gentoo.org/glsa/glsa-200409-26.xml · Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=254303 · Patch
• http://mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17373 · Note