| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 2.0= 2.0.0.11= 2.0.0.12= 2.0.0.13= 2.0.0.14= 2.0.0.2= 2.0.0.3= 2.0_.1= 2.0_.10= 2.0_.4= 2.0_.5= 2.0_.6= 2.0_.9= 2.0_8 | |
| seamonkey | = 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9 | |
| thunderbird | = 2.0_.12= 2.0_.13= 2.0_.14= 2.0_.4= 2.0_.5= 2.0_.6= 2.0_.9= 2.0_8 |
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free