Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel-unstable | Dec 1, 2016 | Jun 12, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefoxUpgrade linux-firefox-devel | Dec 10, 2025 | Jun 12, 2009 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Jun 12, 2009 |
| Mfsa2009 30 | — | Upgrade to Mozilla Firefox version 3.0.11 | Jun 14, 2012 | Jun 12, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jun 12, 2009 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade gconf2Upgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190Upgrade orbit2-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-nspr-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade libidlUpgrade mozilla-xulrunner190-gnomevfsUpgrade orbit2Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner190-32bitUpgrade gconf2-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191Upgrade mozilla-nss-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner190-x86Upgrade libfreebl3Upgrade gconf2-32bitUpgrade orbit2-x86Upgrade mozilla-nsprUpgrade libidl-x86Upgrade libfreebl3-x86Upgrade mozilla-nssUpgrade mozilla-xulrunner192-x86Upgrade libidl-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Jun 12, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub