CVE-2011-0071

Mozilla Firefox < 3.5.19 and 3.6.x < 3.6.17 - Directory Traversal via Resource URL

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

References (9)

Core 9
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2228
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:079
Exploit, Patch x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=624764
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2235
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14058
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:080
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2227
Various Sources x_refsource_confirm
http://downloads.avaya.com/css/P8/documents/100144158

Scores

EPSS 0.0279
EPSS Percentile 84.7%

Details

CWE
CWE-22
Status published
Products (47)
mozilla/firefox 3.6
mozilla/firefox 3.6.2
mozilla/firefox 3.6.3
mozilla/firefox 3.6.4
mozilla/firefox 3.6.6
mozilla/firefox 3.6.7
mozilla/firefox 3.6.8
mozilla/firefox 3.6.9
mozilla/firefox 3.6.10
mozilla/firefox 3.6.11
... and 37 more
Published May 07, 2011
Tracked Since Feb 18, 2026