The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade seamonkey-mailUpgrade firefoxUpgrade devhelp-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-develUpgrade devhelpUpgrade seamonkey-chat | Dec 1, 2016 | Sep 24, 2008 |
| Freebsd | — | Upgrade linux-seamonkey-develUpgrade linux-flockUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade flockUpgrade thunderbirdUpgrade linux-firefox-devel | Dec 10, 2025 | Sep 24, 2008 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Sep 24, 2008 |
| Mfsa2008 44 | — | Upgrade to Mozilla Firefox version 3.0.2Upgrade to Mozilla Firefox version 2.0.0.17 | Jun 14, 2012 | Sep 24, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.12 | Feb 3, 2012 | Sep 24, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.17 | Feb 22, 2012 | Sep 24, 2008 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade nss-pkcs11-develUpgrade yelpUpgrade devhelp-develUpgrade nss-develUpgrade devhelpUpgrade xulrunnerUpgrade firefoxUpgrade nssUpgrade xulrunner-develUpgrade nss-tools | Oct 16, 2024 | Sep 24, 2008 |
| Suse | — | Upgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner190-develUpgrade mozilla-deatUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-csUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner181-l10nUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade suse-releaseUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-xulrunner190-translations-32bitUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefoxUpgrade mozillaUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-venkmanUpgrade MozillaFirefox-translationsUpgrade gecko-sdkUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner181Upgrade seamonkey-ircUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade seamonkey-spellcheckerUpgrade mozilla-develUpgrade MozillaThunderbird-translationsUpgrade seamonkey-mailUpgrade mozilla-ircUpgrade mozilla-mailUpgrade mozilla-calendarUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-huUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-gnomevfs | Feb 17, 2015 | Sep 24, 2008 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefoxUpgrade xulrunner-1.9Upgrade thunderbirdUpgrade mozilla-thunderbird | Nov 8, 2024 | Sep 24, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub