The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-09-24T04:00:00

Updated: 2024-08-08T00:31:48.049Z

Reserved: 2004-09-23T00:00:00

Link: CVE-2004-0906

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2004-12-31T05:00:00.000

Modified: 2017-10-11T01:29:37.497

Link: CVE-2004-0906

cve-icon Redhat

Severity : Low

Publid Date: 2004-02-26T00:00:00Z

Links: CVE-2004-0906 - Bugzilla