Mozilla · Firefox · CVE-2004-0906
Name of the Vulnerable Software and Affected Versions:
Mozilla Firefox versions prior to Preview Release
Mozilla versions prior to 1.7.3
Thunderbird versions prior to 0.8
Description:
The issue is related to the XPInstall installer setting insecure permissions for certain files within xpi packages. This could allow local users to overwrite arbitrary files or execute arbitrary code.
Recommendations:
For Mozilla Firefox versions prior to Preview Release, update to the Preview Release or later to resolve the issue.
For Mozilla versions prior to 1.7.3, update to version 1.7.3 or later to resolve the issue.
For Thunderbird versions prior to 0.8, update to version 0.8 or later to resolve the issue.