Lucene search
MitreCVE-2004-0907HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-0907
2004-12-3105:00:00
mitre
web.nvd.nist.gov
32
cve-2004-0907
linux
mozilla firefox
mozilla
thunderbird
insecure permissions
local exploit
arbitrary code
nvd
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
High
EPSS
0
Percentile
5.1%
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.
Affected configurations
Node
mozillamozillaMatch0.8
ORmozillamozillaMatch0.9.2
ORmozillamozillaMatch0.9.2.1
ORmozillamozillaMatch0.9.3
ORmozillamozillaMatch0.9.4
ORmozillamozillaMatch0.9.4.1
ORmozillamozillaMatch0.9.5
ORmozillamozillaMatch0.9.6
ORmozillamozillaMatch0.9.7
ORmozillamozillaMatch0.9.8
ORmozillamozillaMatch0.9.9
ORmozillamozillaMatch0.9.35
ORmozillamozillaMatch0.9.48
ORmozillamozillaMatch1.0
ORmozillamozillaMatch1.0rc1
ORmozillamozillaMatch1.0rc2
ORmozillamozillaMatch1.0.1
ORmozillamozillaMatch1.0.2
ORmozillamozillaMatch1.1
ORmozillamozillaMatch1.1alpha
ORmozillamozillaMatch1.1beta
ORmozillamozillaMatch1.2
ORmozillamozillaMatch1.2alpha
ORmozillamozillaMatch1.2beta
ORmozillamozillaMatch1.2.1
ORmozillamozillaMatch1.3
ORmozillamozillaMatch1.3.1
ORmozillamozillaMatch1.4
ORmozillamozillaMatch1.4alpha
ORmozillamozillaMatch1.4beta
ORmozillamozillaMatch1.4.1
ORmozillamozillaMatch1.4.2
ORmozillamozillaMatch1.4.4
ORmozillamozillaMatch1.5
ORmozillamozillaMatch1.5.1
ORmozillamozillaMatch1.6
ORmozillamozillaMatch1.7
ORmozillamozillaMatch1.7alpha
ORmozillamozillaMatch1.7beta
ORmozillamozillaMatch1.7rc1
ORmozillamozillaMatch1.7rc2
ORmozillamozillaMatch1.7rc3
ORmozillamozillaMatch1.7.1
ORmozillamozillaMatch1.7.2
ORmozillathunderbirdMatch0.1
ORmozillathunderbirdMatch0.2
ORmozillathunderbirdMatch0.3
ORmozillathunderbirdMatch0.4
ORmozillathunderbirdMatch0.5
ORmozillathunderbirdMatch0.6
ORmozillathunderbirdMatch0.7
ORmozillathunderbirdMatch0.7.1
ORmozillathunderbirdMatch0.7.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | mozilla | 0.8 | cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.2 | cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.2.1 | cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.3 | cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.4 | cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.4.1 | cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.5 | cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.6 | cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.7 | cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:* |
| mozilla | mozilla | 0.9.8 | cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2004-0907
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-0907
2004-09-24 04:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200409-26 (Mozilla)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200409-26 (Mozilla)
2008-09-24 00:00:00
gentoo
gentoo
Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities
2004-09-20 00:00:00
nessus
nessus
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2004-0907