CVE-2007-3074

概要

参考情報

• ha.ckers.org/blog/20070516/read-firefox-settings-poc · Exploit
• larholm.com/2007/05/25/firefox-0day-local-file-reading · Exploit
• larholm.com/2007/06/04/unpatched-input-validation-flaw-in-firefox-2004 · Exploit
• osvdb.org/35918
• secunia.com/advisories/25481 · Vendor Advisory
• securityfocus.com/archive/1/470500/100/0/threaded
• bugzilla.mozilla.org/show_bug.cgi

firefox のその他の脆弱性

• CVE-2026-106016緊急 9.8Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
• CVE-2026-96869中 4.3Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, …
• CVE-2026-100832高 8.8Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4…
• CVE-2026-100831高 8.8Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunder…
• CVE-2026-100830高 8.1Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a…