Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2011-0071

Published: 07/05/2011 Updated: 19/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Firefox

Vulnerability Summary

Directory traversal vulnerability in Mozilla Firefox prior to 3.5.19 and 3.6.x prior to 3.6.17, Thunderbird prior to 3.1.10, and SeaMonkey prior to 2.0.14 on Windows allows remote malicious users to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 3.6.13

mozilla firefox 3.6.4

mozilla firefox 3.6.8

mozilla firefox 3.6.14

mozilla firefox 3.6

mozilla firefox 3.6.11

mozilla firefox 3.6.10

mozilla firefox 3.6.9

mozilla firefox 3.6.3

mozilla firefox 3.6.12

mozilla firefox 3.6.15

mozilla firefox 3.6.2

mozilla firefox 3.6.7

mozilla firefox 3.6.6

mozilla firefox 3.6.16

mozilla seamonkey 1.0

mozilla seamonkey 1.1

mozilla seamonkey 1.1.13

mozilla seamonkey 1.1.2

mozilla seamonkey 1.1.9

mozilla seamonkey 1.1.6

mozilla seamonkey 2.0

mozilla seamonkey 1.1.8

mozilla seamonkey 2.0.3

mozilla seamonkey 2.0.8

mozilla seamonkey 2.0.11

mozilla seamonkey

mozilla seamonkey 1.0.6

mozilla seamonkey 1.1.14

mozilla seamonkey 1.1.11

mozilla seamonkey 1.1.18

mozilla seamonkey 1.1.16

mozilla seamonkey 2.0.6

mozilla seamonkey 1.1.7

mozilla seamonkey 2.0.10

mozilla seamonkey 1.0.4

mozilla seamonkey 1.0.9

mozilla seamonkey 1.1.15

mozilla seamonkey 1.1.17

mozilla seamonkey 1.1.3

mozilla seamonkey 1.5.0.10

mozilla seamonkey 1.1.19

mozilla seamonkey 2.0.2

mozilla seamonkey 2.0.9

mozilla seamonkey 2.0.1

mozilla seamonkey 2.0.12

mozilla seamonkey 1.0.3

mozilla seamonkey 1.0.2

mozilla seamonkey 1.1.1

mozilla seamonkey 1.0.8

mozilla seamonkey 1.1.10

mozilla seamonkey 1.0.7

mozilla seamonkey 1.1.12

mozilla seamonkey 1.1.5

mozilla seamonkey 1.1.4

mozilla seamonkey 1.5.0.8

mozilla seamonkey 1.5.0.9

mozilla seamonkey 1.0.5

mozilla seamonkey 2.0.5

mozilla seamonkey 2.0.7

mozilla seamonkey 2.0.4

mozilla seamonkey 1.0.1

mozilla firefox 1.0

mozilla firefox 3.5.11

mozilla firefox 1.5.5

mozilla firefox 1.5.0.9

mozilla firefox 1.5.3

mozilla firefox 1.5.0.5

mozilla firefox 1.5.0.1

mozilla firefox 2.0.0.3

mozilla firefox 1.5.0.2

mozilla firefox 2.0.0.6

mozilla firefox 2.0.0.8

mozilla firefox 2.0.0.10

mozilla firefox 1.5.7

mozilla firefox 3.0

mozilla firefox 3.0.7

mozilla firefox 3.0.8

mozilla firefox 3.0.12

mozilla firefox 3.0.16

mozilla firefox 3.0.17

mozilla firefox 2.0.0.14

mozilla firefox 3.5.5

mozilla firefox 3.5.3

mozilla firefox 3.5.2

mozilla firefox 3.5.15

mozilla firefox 3.5.13

mozilla firefox 1.0.4

mozilla firefox 1.0.7

mozilla firefox 1.5.6

mozilla firefox 1.5.0.10

mozilla firefox 1.5.2

mozilla firefox 3.5.14

mozilla firefox 1.5.0.4

mozilla firefox 2.0.0.18

mozilla firefox 2.0

mozilla firefox 2.0.0.9

mozilla firefox 2.0.0.11

mozilla firefox 2.0.0.19

mozilla firefox 2.0.0.12

mozilla firefox 3.0.6

mozilla firefox 3.0.4

mozilla firefox 3.0.11

mozilla firefox 3.0.14

mozilla firefox 1.0.6

mozilla firefox 3.5

mozilla firefox 1.0.2

mozilla firefox 1.0.5

mozilla firefox 1.5

mozilla firefox 1.5.0.6

mozilla firefox 1.5.4

mozilla firefox 1.5.0.8

mozilla firefox 1.5.0.12

mozilla firefox 2.0.0.2

mozilla firefox 2.0.0.4

mozilla firefox 2.0.0.7

mozilla firefox 1.5.0.3

mozilla firefox 1.5.8

mozilla firefox 3.0.2

mozilla firefox 3.0.3

mozilla firefox 3.0.5

mozilla firefox 3.0.9

mozilla firefox 3.0.15

mozilla firefox 3.5.9

mozilla firefox 3.5.7

mozilla firefox 3.5.16

mozilla firefox 3.5.1

mozilla firefox 3.5.17

mozilla firefox

mozilla firefox 3.5.12

mozilla firefox 1.0.8

mozilla firefox 1.0.3

mozilla firefox 1.0.1

mozilla firefox 1.5.1

mozilla firefox 1.5.0.7

mozilla firefox 1.5.0.11

mozilla firefox 2.0.0.1

mozilla firefox 2.0.0.16

mozilla firefox 2.0.0.17

mozilla firefox 2.0.0.15

mozilla firefox 2.0.0.20

mozilla firefox 2.0.0.5

mozilla firefox 3.0.10

mozilla firefox 3.0.13

mozilla firefox 3.0.1

mozilla firefox 3.5.6

mozilla firefox 3.5.8

mozilla firefox 2.0.0.13

mozilla firefox 3.5.4

mozilla firefox 3.5.10

mozilla thunderbird 3.1.7

mozilla thunderbird 2.0.0.3

mozilla thunderbird 2.0.0.2

mozilla thunderbird 2.0.0.0

mozilla thunderbird 2.0.0.22

mozilla thunderbird 1.5.0.8

mozilla thunderbird 2.0.0.16

mozilla thunderbird 1.5

mozilla thunderbird 1.0.4

mozilla thunderbird 0.4

mozilla thunderbird 0.6

mozilla thunderbird 0.7.3

mozilla thunderbird 3.1.4

mozilla thunderbird 1.5.0.5

mozilla thunderbird 1.5.0.2

mozilla thunderbird 3.0.4

mozilla thunderbird 3.0.6

mozilla thunderbird 2.0.0.8

mozilla thunderbird 2.0.0.7

mozilla thunderbird 2.0.0.12

mozilla thunderbird 2.0.0.17

mozilla thunderbird 2.0.0.6

mozilla thunderbird 1.0.6

mozilla thunderbird 1.5.0.9

mozilla thunderbird 1.5.0.4

mozilla thunderbird 0.2

mozilla thunderbird 3.1

mozilla thunderbird 3.1.1

mozilla thunderbird 3.1.6

mozilla thunderbird 1.0

mozilla thunderbird 1.5.0.13

mozilla thunderbird 3.1.5

mozilla thunderbird 2.0.0.9

mozilla thunderbird 1.5.0.14

mozilla thunderbird 0.7.2

mozilla thunderbird 3.0.5

mozilla thunderbird 3.1.8

mozilla thunderbird

mozilla thunderbird 3.0.7

mozilla thunderbird 2.0.0.5

mozilla thunderbird 2.0.0.4

mozilla thunderbird 2.0.0.23

mozilla thunderbird 1.5.1

mozilla thunderbird 1.5.2

mozilla thunderbird 1.0.7

mozilla thunderbird 1.5.0.3

mozilla thunderbird 1.5.0.7

mozilla thunderbird 0.5

mozilla thunderbird 3.1.2

mozilla thunderbird 0.7.1

mozilla thunderbird 0.3

mozilla thunderbird 1.5.0.10

mozilla thunderbird 1.5.0.1

mozilla thunderbird 0.7

mozilla thunderbird 1.5.0.6

mozilla thunderbird 3.0.2

mozilla thunderbird 3.0.10

mozilla thunderbird 1.5.0.12

mozilla thunderbird 1.0.5

mozilla thunderbird 1.5.0.11

mozilla thunderbird 3.0.8

mozilla thunderbird 1.0.3

mozilla thunderbird 3.0.11

mozilla thunderbird 2.0.0.1

mozilla thunderbird 2.0.0.19

mozilla thunderbird 2.0

mozilla thunderbird 2.0.0.21

mozilla thunderbird 2.0.0.18

mozilla thunderbird 2.0.0.14

mozilla thunderbird 1.0.8

mozilla thunderbird 1.0.2

mozilla thunderbird 0.8

mozilla thunderbird 0.1

mozilla thunderbird 0.9

mozilla thunderbird 3.1.3

mozilla thunderbird 1.7.3

mozilla thunderbird 1.0.1

mozilla thunderbird 1.7.1

mozilla thunderbird 3.0.3

mozilla thunderbird 3.0.1

mozilla thunderbird 3.0.9

mozilla thunderbird 3.0

Vendor Advisories

Debian Security Advisories: DSA-2228-1 iceweasel -- several vulnerabilities
Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox: CVE-2011-0069 CVE-2011-0070 CVE-2011-0072 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0080 CVE-2011-0081 Scoobidiver, Ian Beer Bob Clary, Henri Sivonen, Marco Bonardo, Mats Palmgren, Jesse Ruderman, Aki Kelin and Martin Barbella disc ...
Debian Security Advisories: DSA-2235-1 icedove -- several vulnerabilities
Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client CVE-2011-0069 CVE-2011-0070 CVE-2011-0072 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0080 CVE-2011-0081 Scoobidiver, Ian Beer Bob Clary, Henri Sivonen, Marco Bonardo, Ma ...
Ubuntu Security Notice: firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.2 vulnerabilities
Multiple vulnerabilities in Firefox and Xulrunner ...
Ubuntu Security Notice: Multiple Xulrunner 1.9.1 vulnerabilities
Multiple xulrunner-191 vulnerabilities ...
Ubuntu Security Notice: thunderbird regression
An empty menu bar sometimes appeared after upgrade in USN-1122-2 ...
Ubuntu Security Notice: thunderbird vulnerabilities
Thunderbird could be made to run programs as your login if it opened specially crafted mail ...
Ubuntu Security Notice: thunderbird vulnerabilities
Thunderbird could be made to run programs as your login if it opened specially crafted mail ...
Mozilla: Directory traversal in resource: protocol
Mozilla Foundation Security Advisory 2011-16 Directory traversal in resource: protocol Announced April 28, 2011 Reporter Soroush Dalili Impact Moderate Products Firefox, SeaMonkey, Thunderbird Fixed in ...

References

CWE-22https://bugzilla.mozilla.org/show_bug.cgi?id=624764http://www.mozilla.org/security/announce/2011/mfsa2011-16.htmlhttp://www.debian.org/security/2011/dsa-2235http://www.debian.org/security/2011/dsa-2227http://www.debian.org/security/2011/dsa-2228http://www.mandriva.com/security/advisories?name=MDVSA-2011:080http://www.mandriva.com/security/advisories?name=MDVSA-2011:079http://downloads.avaya.com/css/P8/documents/100144158https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14058https://nvd.nist.govhttps://www.debian.org/security/./dsa-2228https://usn.ubuntu.com/1112-1/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook