Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nsprUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade firefoxUpgrade nspr-develUpgrade seamonkeyUpgrade thunderbirdUpgrade seamonkey-mailUpgrade seamonkey-nsprUpgrade seamonkey-js-debuggerUpgrade seamonkey-nssUpgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade seamonkey-nspr-devel | Dec 1, 2016 | Sep 21, 2009 |
| Freebsd | — | Upgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Oct 28, 2009 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Sep 21, 2009 |
| Mfsa2009 53 | — | Upgrade to Mozilla Firefox version 3.0.15Upgrade to Mozilla Firefox version 3.5.4 | Jun 14, 2012 | Sep 21, 2009 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade nsprUpgrade nspr-develUpgrade firefox | Oct 16, 2024 | Sep 21, 2009 |
| Suse | — | Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-nssUpgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade MozillaFirefox-translations-commonUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-develUpgrade libidl-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-translationsUpgrade orbit2Upgrade libidlUpgrade libidl-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefoxUpgrade mozilla-xulrunner190-gnomevfsUpgrade libfreebl3-x86Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-x86Upgrade orbit2-32bitUpgrade gconf2Upgrade mozilla-nss-32bitUpgrade mozilla-nspr-32bitUpgrade orbit2-x86Upgrade mozilla-xulrunner191Upgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.1Upgrade firefox-3.5Upgrade xulrunner-1.9Upgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Sep 21, 2009 |
| Vmsa 2010 0001 1 Update For Service Console Packages Nss And Nspr | — | Upgrade VMware ESX 4.0 to build number 219382 | Sep 2, 2010 | Sep 21, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub