Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade el-linux-mozillafirebirdUpgrade linux-mozillaUpgrade mozillaUpgrade mozilla+ipv6Upgrade ja-linux-mozillafirebird-gtk1Upgrade de-linux-netscapeUpgrade ja-netscape7Upgrade linux-netscapeUpgrade fr-netscape7Upgrade fr-linux-netscapeUpgrade de-netscape7Upgrade linux-phoenixUpgrade linux-mozillafirebirdUpgrade linux-mozilla-develUpgrade thunderbirdUpgrade firefoxUpgrade netscape7Upgrade de-linux-mozillafirebirdUpgrade ja-mozillafirebird-gtk2Upgrade zhTW-linux-mozillafirebirdUpgrade mozilla-gtk1Upgrade pt_BR-netscape7Upgrade mozilla-thunderbirdUpgrade ru-linux-mozillafirebirdUpgrade ja-linux-netscapeUpgrade phoenixUpgrade mozilla-gtkUpgrade mozilla-gtk2Upgrade zhCN-linux-mozillafirebirdUpgrade mozilla-firebirdUpgrade mozilla-embedded | Dec 10, 2025 | Sep 30, 2004 |
| Gentoo Linux | — | Upgrade www-client/epiphany.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-bin.Upgrade www-client/mozilla.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Dec 31, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub