NetSight
IP …
medium4.3

CVE-2006-1729

Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary fi…

Impact

Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.

Affected products

VendorProductAffected versions
MozillaFirefox
from 1.0 before 1.0.8
from 1.5 before 1.5.0.2
MozillaMozilla Suite
before 1.7.13
MozillaSeamonkey
before 1.0.1
CanonicalUbuntu Linux
Versions 4.10, 5.04, 5.10

Weakness classification

CWE-20

References