CVE-2006-1729
Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file…
Does this matter?
Lower severity and a low EPSS score (2.23%). Track it; it rarely justifies an emergency change on its own.
Description
Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 2.23% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- mozilla/firefox · mozilla/mozilla suite · mozilla/seamonkey · canonical/ubuntu linux
- Source
- secalert@redhat.com
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txtBroken Link
- ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.ascBroken Link
- http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.htmlBroken Link
- http://secunia.com/advisories/19631Third Party Advisory
- http://secunia.com/advisories/19649Third Party Advisory
- http://secunia.com/advisories/19696Third Party Advisory
- http://secunia.com/advisories/19714Third Party Advisory
- http://secunia.com/advisories/19721Third Party Advisory
- http://secunia.com/advisories/19729Third Party Advisory
- http://secunia.com/advisories/19746Third Party Advisory
- http://secunia.com/advisories/19759Third Party Advisory
- http://secunia.com/advisories/19794Third Party Advisory
- http://secunia.com/advisories/19811Third Party Advisory
- http://secunia.com/advisories/19852Third Party Advisory
- http://secunia.com/advisories/19862Third Party Advisory
- http://secunia.com/advisories/19863Third Party Advisory
- http://secunia.com/advisories/19902Third Party Advisory
- http://secunia.com/advisories/19941Third Party Advisory
- http://secunia.com/advisories/21033Third Party Advisory
- http://secunia.com/advisories/21622Third Party Advisory
- http://secunia.com/advisories/22066Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1Broken Link
- http://support.avaya.com/elmodocs2/security/ASA-2006-205.htmThird Party Advisory
- http://www.debian.org/security/2006/dsa-1044Third Party Advisory
- http://www.debian.org/security/2006/dsa-1046Third Party Advisory
- http://www.debian.org/security/2006/dsa-1051Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200604-12.xmlThird Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200604-18.xmlThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:075Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.