CyberSec.Space Logo
返回 CVE 浏览器

CVE-2004-0764

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1630%
EPSS Percentile38.10th
Published2004年8月18日
Last Modified2026年4月16日

Vulnerability Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.

Affected Platforms (CPE)

📦
Mozilla

Firefox

<= 0.9
📦
Mozilla

Mozilla

<= 1.7
📦
Mozilla

Thunderbird

<= 0.7

References & Advisories

🔗 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt
🔗 http://bugzilla.mozilla.org/show_bug.cgi?id=244965
🔗 http://marc.info/?l=bugtraq&m=109900315219363&w=2
🔗 http://secunia.com/advisories/12188
🔗 http://www.kb.cert.org/vuls/id/262350
🔗 http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
🔗 http://www.novell.com/linux/security/advisories/2004_36_mozilla.html
🔗 http://www.redhat.com/support/errata/RHSA-2004-421.html

相关漏洞威胁

CVE-2019-1170810.0

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the no...

CVE-2019-2513610.0

A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and ...

CVE-2018-1850510.0

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication betwee...

CVE-2020-1238810.0

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this iss...