Security Advisory

CVE-2004-0906

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-09-24 04:00:00

Last updated 2024-08-08 00:31:48

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.

← Browse all CVEs View on cve.org ↗