AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2004-0906

MEDIUM · CVSS 4.6 EPSS 0.42%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-31 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.6. It affects Firefox.

CVE
CVE-2004-0906
Severity
MEDIUM
CVSS
4.6
EPSS
0.42%
Firefox

Original NVD Description

The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.