CVE-2004-0907
Mozilla Firefox <Preview Release - Local Privilege Escalation
Title source: llmDescription
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17373
Patch x_refsource_confirm
http://bugzilla.mozilla.org/show_bug.cgi?id=254303
Various Sources x_refsource_confirm
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200409-26.xml
Scores
EPSS
0.0042
EPSS Percentile
34.3%
Details
Status
published
Products (37)
mozilla/mozilla
0.8
mozilla/mozilla
0.9.2
mozilla/mozilla
0.9.2.1
mozilla/mozilla
0.9.3
mozilla/mozilla
0.9.4
mozilla/mozilla
0.9.4.1
mozilla/mozilla
0.9.5
mozilla/mozilla
0.9.6
mozilla/mozilla
0.9.7
mozilla/mozilla
0.9.8
... and 27 more
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026