CVE-2004-0763

Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web...

5.0 MediumPublic exploit

Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.

Exploit likelihood

5.74%Down 6.8 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.

Record: CVE-2004-0763
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.

Record: CVE-2004-0763
Updated: 2026-11-02

EUVDEUVD-2004-0761 No score

Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.

Record: EUVD-2004-0761
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8rh9-c9p7-ppjc No score

Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web...

Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.

Record: GHSA-8rh9-c9p7-ppjc
Updated: 2026-11-02

Affected products

mozilla firefox

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Microsoft Internet Explorer 6 - Meta Data Foreign Domain Spoofing	2004-04-30
Exploit-DB	Mozilla Browser 0.8/0.9/1.x - Refresh Security Property Spoofing	2004-07-26

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0763 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published August 3, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.74%, the 93rd percentile. No source names a fixed version.

References

Show 10 moreShow less