The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade seamonkey-mailUpgrade firefoxUpgrade devhelp-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade devhelpUpgrade seamonkey-chat | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-seamonkey-develUpgrade linux-flockUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade flockUpgrade thunderbirdUpgrade linux-firefox-devel | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 44 | — | Upgrade to Mozilla Firefox version 3.0.2Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade nss-develUpgrade devhelp-develUpgrade devhelpUpgrade yelpUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade nssUpgrade nss-toolsUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-xulrunner190-64bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner181-32bitUpgrade seamonkey-dom-inspectorUpgrade MozillaFirefox-translationsUpgrade mozilla-csUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkeyUpgrade gecko-sdkUpgrade suse-releaseUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-venkmanUpgrade mozilla-dom-inspectorUpgrade MozillaFirefoxUpgrade mozilla-xulrunner181-develUpgrade mozilla-deatUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner181-l10nUpgrade mozillaUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-translationsUpgrade seamonkey-spellcheckerUpgrade mozilla-xulrunner181Upgrade mozilla-ircUpgrade mozilla-calendarUpgrade mozilla-mailUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-ircUpgrade mozilla-develUpgrade MozillaThunderbird-develUpgrade mozilla-huUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade seamonkey-venkmanUpgrade seamonkey-mail | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefoxUpgrade mozilla-thunderbirdUpgrade thunderbirdUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Sep 24, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub