PT-2004-2364 · Mozilla · Mozilla Firefox

Darin Fisher · Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-1450

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Mozilla versions 1.7 beta

Description: A remote attacker can read arbitrary files in known locations due to an unknown vulnerability in LiveConnect.

Recommendations: For Mozilla version 1.7 beta, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-1450

Affected Products

Mozilla Firefox

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2004-1450 · Security Note
• http://bugzilla.mozilla.org/show_bug.cgi?id=239122 · Patch
• http://mozilla.org/projects/security/known-vulnerabilities.html · Note