Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
CVSS Details
- CVSS 3.1 Base Score: 7.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade devhelpUpgrade seamonkey-develUpgrade seamonkey-chatUpgrade thunderbirdUpgrade firefoxUpgrade devhelp-develUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade seamonkey-js-debugger | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-seamonkey-develUpgrade linux-firefoxUpgrade linux-flockUpgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade flockUpgrade thunderbird | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 44 | — | Upgrade to Mozilla Firefox version 3.0.2Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade yelpUpgrade nss-develUpgrade devhelpUpgrade nss-pkcs11-develUpgrade devhelp-develUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade firefoxUpgrade xulrunnerUpgrade nssUpgrade nss-tools | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade seamonkey-venkmanUpgrade mozilla-mailUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-spellcheckerUpgrade mozilla-huUpgrade seamonkey-mailUpgrade MozillaThunderbird-translationsUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-ircUpgrade mozilla-xulrunner181Upgrade mozilla-calendarUpgrade seamonkey-ircUpgrade mozilla-develUpgrade mozilla-deatUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade seamonkey-dom-inspectorUpgrade MozillaThunderbirdUpgrade gecko-sdkUpgrade mozilla-xulrunner181-l10nUpgrade suse-releaseUpgrade mozillaUpgrade mozilla-venkmanUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-csUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner181-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-dom-inspectorUpgrade MozillaFirefoxUpgrade seamonkeyUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner181-devel | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade firefoxUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Sep 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub