[Forgot Password]
Login  Register Subscribe

24436

 
 

131815

 
 

115228

 
 

909

 
 

90122

 
 

140

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2011-0071Date: (C)2011-05-07   (M)2018-09-27


Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE
  
Reference:
DSA-2227
DSA-2228
DSA-2235
MDVSA-2011:079
MDVSA-2011:080
http://downloads.avaya.com/css/P8/documents/100144158
http://www.mozilla.org/security/announce/2011/mfsa2011-16.html
https://bugzilla.mozilla.org/show_bug.cgi?id=624764

CPE    247
cpe:/a:mozilla:firefox:3.5.16
cpe:/a:mozilla:firefox:3.5.17
cpe:/a:mozilla:firefox:3.5.18
cpe:/a:mozilla:firefox:1.5:beta2
...
CWE    1
CWE-22
OVAL    19
oval:org.secpod.oval:def:201463
oval:org.secpod.oval:def:400009
oval:org.secpod.oval:def:200598
oval:org.secpod.oval:def:700522
...

© SecPod Technologies