NetSight
IP …
high7.8

CVE-2008-4068

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remo…

Impact

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.

Affected products

VendorProductAffected versions
MozillaFirefox
before 2.0.0.17
from 3.0 before 3.0.2
MozillaSeamonkey
before 1.1.12
MozillaThunderbird
before 2.0.0.17
DebianDebian Linux
Version 4.0
CanonicalUbuntu Linux
Versions 6.06, 7.04, 7.10, 8.04

Weakness classification

CWE-22

References