NetSight
IP …
medium4.3

CVE-2015-0822

The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbit…

Impact

The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.

Affected products

VendorProductAffected versions
MozillaFirefox
through 35.0.1
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaThunderbird
through 31.4
Versions 31.0, 31.1.2, 31.2, 31.3
MozillaFirefox Esr
Versions 31.1, 31.2, 31.3, 31.4, 31.5

Weakness classification

CWE-200

References