Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-devel-unstableUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Jun 12, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade linux-firefox-develUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkey | Dec 10, 2025 | Jun 12, 2009 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jun 12, 2009 |
| Mfsa2009 30 | — | Upgrade to Mozilla Firefox version 3.0.11 | Jun 14, 2012 | Jun 12, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunnerUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Jun 12, 2009 |
| Suse | — | Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191Upgrade mozilla-nspr-x86Upgrade orbit2Upgrade mozilla-xulrunner192-32bitUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade orbit2-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190Upgrade gconf2-x86Upgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-nspr-32bitUpgrade libidlUpgrade mozilla-nss-32bitUpgrade gconf2Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-x86Upgrade libfreebl3-x86Upgrade libidl-32bitUpgrade mozilla-nsprUpgrade libidl-x86Upgrade MozillaFirefox-branding-SLEDUpgrade orbit2-x86Upgrade mozilla-nssUpgrade mozilla-xulrunner192-x86Upgrade gconf2-32bitUpgrade libfreebl3 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade abrowserUpgrade firefox-3.0 | Nov 8, 2024 | Jun 12, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub