CVE-2004-0762: Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbit...

Security readout for executives and security teams

A malicious website could trick old Mozilla-family clients into installing an extension by manipulating the XPInstall security dialog during interactive events. The business risk is mainly for environments still running Mozilla before 1.7, Firefox before 0.9, or Thunderbird before 0.7. Exposure is expected only where very old Mozilla, Firefox, or Thunderbird versions remain in use. Modern standard browser fleets are unlikely to be affected based on the version ranges in the CVE description. Low to moderate for most organizations today, but higher if legacy Unix or Linux workstations still use the affected browsers or mail clients for web access. Mitigation focus: Retire or upgrade Mozilla-family clients older than the fixed version ranges.; Check relevant vendor advisories for package-specific update guidance.; Disable or restrict XPInstall where legacy clients cannot be immediately removed..

Prepared

Jun 30, 2026, 04:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.