CVE-2004-0762: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.

Affected products

• Mozilla Firefox: up to and including 0.9
• Mozilla Mozilla: up to and including 1.7
• Mozilla Thunderbird: up to and including 0.7

Published 2004-08-18. Last modified 2026-06-16.