2.6
CVSSv2

CVE-2004-1449

Published: 31/12/2004 Updated: 05/09/2008
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N

Vulnerability Summary

Mozilla prior to 1.7, Firefox prior to 0.9, and Thunderbird prior to 0.7 allows remote malicious users to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla mozilla 0.9.2.1

mozilla mozilla 0.9.3

mozilla mozilla 0.9.35

mozilla mozilla 0.9.4

mozilla mozilla 1.1

mozilla mozilla 1.2

mozilla mozilla 1.2.1

mozilla thunderbird 0.1

mozilla thunderbird 0.2

mozilla thunderbird 0.3

mozilla thunderbird 0.4

mozilla mozilla 0.8

mozilla mozilla 0.9.48

mozilla mozilla 0.9.6

mozilla mozilla 1.0

mozilla mozilla 1.3

mozilla mozilla 1.4

mozilla mozilla 1.5.1

mozilla thunderbird 0.6

mozilla mozilla 0.9.7

mozilla mozilla 0.9.8

mozilla mozilla 0.9.9

mozilla mozilla 1.0.1

mozilla mozilla 1.4.1

mozilla mozilla 1.4.2

mozilla mozilla 1.4.4

firebirdsql firebird 0.7

mozilla mozilla 0.9.2

mozilla mozilla 0.9.4.1

mozilla mozilla 0.9.5

mozilla mozilla 1.0.2

mozilla mozilla 1.3.1

mozilla mozilla 1.5

mozilla mozilla 1.6

mozilla thunderbird 0.5