| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≥ 3.0, < 3.0.2< 2.0.0.17 | 3.0.22.0.0.17 |
| seamonkey | < 1.1.12 | 1.1.12 |
| thunderbird | < 2.0.0.17 | 2.0.0.17 |
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free