← Database

CVE-2004-0648

CRITICAL CVSS: 10.0 Published: 2004-08-06 Modified: 2026-06-16

Description

Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.

Affected Platforms

Mozilla FirefoxMozilla MozillaMozilla Thunderbird

Weakness Type

NVD-CWE-Other

References