CVE-2004-1449

Mozilla <1.7-Firefox <0.9-Thunderbird <0.7 - Info Disclosure

Title source: llm
STIX 2.1

Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.

References (2)

Core 2
Core References
Various Sources vendor-advisory x_refsource_mandrake
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:082
Issue Tracking x_refsource_confirm
http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0

Scores

EPSS 0.0092
EPSS Percentile 56.5%

Details

Status published
Products (35)
firebirdsql/firebird 0.7
mozilla/mozilla 0.8
mozilla/mozilla 0.9.2
mozilla/mozilla 0.9.2.1
mozilla/mozilla 0.9.3
mozilla/mozilla 0.9.4
mozilla/mozilla 0.9.4.1
mozilla/mozilla 0.9.5
mozilla/mozilla 0.9.6
mozilla/mozilla 0.9.7
... and 25 more
Published Dec 31, 2004
Tracked Since Feb 18, 2026