[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97559

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-0071

Date: (C)2011-05-07   (M)2017-09-22
 
CVSS Score: 5.0Access Vector: NETWORK
Exploitability Subscore: 10.0Access Complexity: LOW
Impact Subscore: 2.9Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: NONE
 Availability: NONE











Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

Reference:
DSA-2227
DSA-2228
DSA-2235
MDVSA-2011:079
MDVSA-2011:080
http://downloads.avaya.com/css/P8/documents/100144158
http://www.mozilla.org/security/announce/2011/mfsa2011-16.html
https://bugzilla.mozilla.org/show_bug.cgi?id=624764

CPE    247
cpe:/a:mozilla:seamonkey:1.1.19
cpe:/a:mozilla:seamonkey:1.1.18
cpe:/a:mozilla:seamonkey:1.1.17
cpe:/a:mozilla:seamonkey:1.1:beta
...
CWE    1
CWE-22
OVAL    19
oval:org.secpod.oval:def:700507
oval:org.secpod.oval:def:1065
oval:org.secpod.oval:def:931
oval:org.secpod.oval:def:201463
...

© 2013 SecPod Technologies