Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
CVSS Details
- CVSS 3.1 Base Score: 7.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade seamonkey-develUpgrade devhelpUpgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade seamonkey-js-debuggerUpgrade devhelp-devel | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade flockUpgrade linux-thunderbirdUpgrade linux-firefox-develUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-flockUpgrade linux-seamonkey-develUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 44 | — | Upgrade to Mozilla Firefox version 3.0.2Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade nss-toolsUpgrade firefoxUpgrade xulrunner-develUpgrade nssUpgrade devhelp-develUpgrade xulrunner-devel-unstableUpgrade nss-develUpgrade nss-pkcs11-develUpgrade devhelpUpgrade yelp | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181Upgrade seamonkey-venkmanUpgrade MozillaThunderbird-translationsUpgrade seamonkey-mailUpgrade mozilla-mailUpgrade mozilla-ircUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-calendarUpgrade mozilla-develUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade seamonkey-ircUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-huUpgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-translations-32bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-32bitUpgrade gecko-sdkUpgrade seamonkeyUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner181-32bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade seamonkey-dom-inspectorUpgrade mozilla-deatUpgrade MozillaFirefox-translationsUpgrade mozillaUpgrade suse-releaseUpgrade mozilla-xulrunner190Upgrade mozilla-venkmanUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-csUpgrade mozilla-xulrunner190-devel | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefoxUpgrade xulrunner-1.9Upgrade thunderbirdUpgrade mozilla-thunderbird | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub