CVE-2004-0648: Mozilla Firefox

High severity, CVSS 10.0. EPSS: 5.3% chance of exploitation in the next 30 days.

Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.

Affected products

• Mozilla Firefox: up to and including 0.9.2
• Mozilla Mozilla: up to and including 1.7.1
• Mozilla Thunderbird: up to and including 0.7.2

Published 2004-08-06. Last modified 2026-06-16.