components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade nss-toolsUpgrade nss-develUpgrade nssUpgrade seamonkey-chatUpgrade seamonkeyUpgrade seamonkey-nss-develUpgrade seamonkey-nspr-develUpgrade seamonkey-develUpgrade firefoxUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nssUpgrade seamonkey-js-debuggerUpgrade seamonkey-nsprUpgrade seamonkey-mail | Dec 1, 2016 | Feb 4, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade firefoxUpgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-seamonkey-devel | Dec 10, 2025 | Feb 11, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Feb 4, 2009 |
| Mfsa2009 03 | — | Upgrade to Mozilla Firefox version 3.0.6 | Jun 14, 2012 | Feb 4, 2009 |
| Oracle_linux | — | Upgrade nssUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade nss-pkcs11-develUpgrade xulrunner-develUpgrade firefoxUpgrade nss-toolsUpgrade nss-devel | Oct 16, 2024 | Feb 4, 2009 |
| Suse | — | Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefoxUpgrade abrowser | Nov 8, 2024 | Feb 4, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub