CVEvulnerability

CVE-2009-3274

4.4 MEDIUM Published 2009-09-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-09-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P

Description

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.

Affected configurations

• mozilla firefox 2.0 • mozilla firefox 2.0.0.1 • mozilla firefox 2.0.0.2 • mozilla firefox 2.0.0.3 • mozilla firefox 2.0.0.4 • mozilla firefox 2.0.0.5 • mozilla firefox 2.0.0.6 • mozilla firefox 2.0.0.7 • mozilla firefox 2.0.0.8 • mozilla firefox 2.0.0.9 • mozilla firefox 2.0.0.10 • mozilla firefox 2.0.0.11 • mozilla firefox 2.0.0.12 • mozilla firefox 2.0.0.13 • mozilla firefox 2.0.0.14 • mozilla firefox 2.0.0.15 • mozilla firefox 2.0.0.16 • mozilla firefox 2.0.0.17 • mozilla firefox 2.0.0.18 • mozilla firefox 2.0.0.19 • mozilla firefox 2.0.0.20 • mozilla firefox 3.0 • mozilla firefox 3.0.1 • mozilla firefox 3.0.2 • mozilla firefox 3.0.3 • mozilla firefox 3.0.4 • mozilla firefox 3.0.5 • mozilla firefox 3.0.6 • mozilla firefox 3.0.7 • mozilla firefox 3.0.8 • mozilla firefox 3.0.9 • mozilla firefox 3.0.10 • mozilla firefox 3.0.11 • mozilla firefox 3.0.12 • mozilla firefox 3.0.13 • mozilla firefox 3.0.14 • mozilla firefox 3.5 • mozilla firefox 3.5.1 • mozilla firefox 3.5.2 • mozilla firefox 3.5.3 • mozilla firefox 3.6

References