PT-2007-4364 · Mozilla · Firefox

Sync2D

·

CVE-2007-3072

·

Published

2007-06-06

·

Updated

2018-10-16

CVSS v2.0

7.1

High

VectorAV:N/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 2.0.0.4
Description: A directory traversal issue allows remote attackers to read arbitrary files via ..%5C (dot dot encoded backslash) sequences in a "resource:// URI".
Recommendations: For versions prior to 2.0.0.4, update to version 2.0.0.4 or later to resolve the issue.

Exploit

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2007-3072

Affected Products

Firefox