0.7.2

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-31	CVE-2004-0907	Unspecified vulnerability in Mozilla and Thunderbird The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code. local low complexity mozilla	4.6
2004-12-31	CVE-2004-0906	Unspecified vulnerability in Mozilla and Thunderbird The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code. local low complexity mozilla	4.6
2004-12-31	CVE-2004-0904	Integer Overflow vulnerability in Mozilla Browser BMP Image Decoding Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows. network low complexity mozilla netscape conectiva redhat critical	10.0
2004-08-06	CVE-2004-0648	Unspecified vulnerability in Mozilla Firefox, Mozilla and Thunderbird Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol. network low complexity mozilla critical	10.0