CVE-2007-5335

Firefox < 2.0.0.7 - Exposure of Sensitive System Information via addMicrosummaryGenerator

Title source: llm
STIX 2.1

Description

Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs.

References (9)

Core 9
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=390983
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/535-1/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27387
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/37428
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27665
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27335
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/42470

Scores

EPSS 0.0129
EPSS Percentile 66.8%

Details

CWE
CWE-200
Status published
Products (1)
mozilla/firefox < 2.0.0.7
Published Oct 24, 2007
Tracked Since Feb 18, 2026