components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-develUpgrade seamonkeyUpgrade seamonkey-nspr-develUpgrade seamonkey-nss-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nssUpgrade thunderbirdUpgrade nss-toolsUpgrade seamonkey-mailUpgrade nssUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade firefoxUpgrade nss-develUpgrade seamonkey-js-debugger | Dec 1, 2016 | Feb 4, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-seamonkey-devel | Dec 10, 2025 | Feb 11, 2009 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Feb 4, 2009 |
| Mfsa2009 03 | — | Upgrade to Mozilla Firefox version 3.0.6 | Jun 14, 2012 | Feb 4, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade nss-pkcs11-develUpgrade xulrunnerUpgrade nssUpgrade firefoxUpgrade nss-develUpgrade nss-toolsUpgrade xulrunner-devel | Oct 16, 2024 | Feb 4, 2009 |
| Suse | — | Upgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefox | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefox | Nov 8, 2024 | Feb 4, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub