Skip to content
OpenAdvisories
Unscored CVE-2011-0071 EUVD-2011-0097GHSA-2mm2-3xh2-c3hj

Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before…

Published May 7, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 6.0 iceape 2.0.11-5 DSA-2227-1
Debian 6.0 icedove 3.0.11-1+squeeze2 DSA-2235-1
Debian 6.0 iceweasel 3.5.16-7 DSA-2228-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 firefox 3.6.17-1.el6_0 RHSA-2011:0471
RHEL 6 thunderbird 3.1.10-1.el6_0 RHSA-2011:0475
RHEL 6 xulrunner +1 1.9.2.17-4.el6_0 RHSA-2011:0471
RHEL 5 firefox 3.6.17-1.el5_6 RHSA-2011:0471
RHEL 5 xulrunner +1 1.9.2.17-3.el5_6 RHSA-2011:0471
RHEL 4 firefox 3.6.17-2.el4 RHSA-2011:0471

Advisories 5

References