The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade xulrunner-develUpgrade firefox | Dec 1, 2016 | Feb 25, 2015 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade libxulUpgrade seamonkey | Dec 10, 2025 | Feb 27, 2015 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade dev-libs/nspr.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin. | Oct 30, 2017 | Feb 25, 2015 |
| Mfsa2015 24 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 31.5Upgrade to Mozilla Firefox version 36.0 | Feb 26, 2015 | Feb 25, 2015 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.33Upgrade to the latest version of Mozilla SeaMonkey | Mar 23, 2015 | Feb 25, 2015 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 31.5Upgrade to the latest version of Mozilla Thunderbird | Feb 26, 2015 | Feb 25, 2015 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3Upgrade web/browser/firefox to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/browser/firefox/multi-user-desktop to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/data/firefox-bookmarks to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2 | May 29, 2017 | Feb 25, 2015 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade thunderbirdUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Feb 25, 2015 |
| Suse | — | Upgrade mozilla-nssUpgrade MozillaFirefox-translationsUpgrade mozilla-nspr-32bitUpgrade libfreebl3Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nsprUpgrade mozilla-xulrunner192Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-translationsUpgrade MozillaThunderbirdUpgrade mozilla-nss-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner191-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-other | Dec 18, 2015 | Feb 25, 2015 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Feb 25, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub