CVEvulnerability
CVE-2011-0071
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-05-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla firefox 3.6.11
• mozilla firefox 3.6.12
• mozilla firefox 3.6.13
• mozilla firefox 3.6.14
• mozilla firefox 3.6.15
• mozilla firefox 3.6.16
• mozilla seamonkey (<= 2.0.13)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
… and 172 more
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://downloads.avaya.com/css/P8/documents/100144158 downloads.avaya.com
- http://www.debian.org/security/2011/dsa-2227 www.debian.org
- http://www.debian.org/security/2011/dsa-2228 www.debian.org
- http://www.debian.org/security/2011/dsa-2235 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:080 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-16.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=624764 Exploit, Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14058 oval.cisecurity.org
- http://downloads.avaya.com/css/P8/documents/100144158 downloads.avaya.com
- http://www.debian.org/security/2011/dsa-2227 www.debian.org
- http://www.debian.org/security/2011/dsa-2228 www.debian.org
- http://www.debian.org/security/2011/dsa-2235 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:079 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:080 www.mandriva.com
- http://www.mozilla.org/security/announce/2011/mfsa2011-16.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=624764 Exploit, Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14058 oval.cisecurity.org