CVE-2004-0761: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.

Affected products

• Mozilla Firefox: up to and including 0.9
• Mozilla Mozilla: up to and including 1.7
• Mozilla Thunderbird: up to and including 0.7

Published 2004-08-18. Last modified 2026-06-16.