CVE-2004-0762
No fix known EPSS 2%
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.
Products: mozilla firefox, mozilla, mozilla thunderbird