CVEvulnerability

CVE-2006-1729

4.3 MEDIUM Published 2006-04-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-04-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-20

Description

Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.

Affected configurations

• mozilla firefox (>= 1.0 < 1.0.8) • mozilla firefox (>= 1.5 < 1.5.0.2) • mozilla mozilla suite (< 1.7.13) • mozilla seamonkey (< 1.0.1) • canonical ubuntu linux 4.10 • canonical ubuntu linux 5.04 • canonical ubuntu linux 5.10

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References