CVE-2004-0764: Mozilla Firefox

High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days.

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.

Affected products

• Mozilla Firefox: up to and including 0.9
• Mozilla Mozilla: up to and including 1.7
• Mozilla Thunderbird: up to and including 0.7

Published 2004-08-18. Last modified 2026-06-16.