Vulnerability in Mozilla
CVE-2004-0907
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.
EPSS: 0.004 (34.6th percentile) — read the EPSS interpretation.
Affected products
- Mozilla — versions 0.8, 0.9.2, 0.9.2.1
- Mozilla Thunderbird — versions 0.1, 0.2, 0.3
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)