2.6

CVE-2004-1449

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Firebirdsql ≫ Firebird Version 0.7
Mozilla ≫ Mozilla Version 0.8
Mozilla ≫ Mozilla Version 0.9.2
Mozilla ≫ Mozilla Version 0.9.2.1
Mozilla ≫ Mozilla Version 0.9.3
Mozilla ≫ Mozilla Version 0.9.4
Mozilla ≫ Mozilla Version 0.9.4.1
Mozilla ≫ Mozilla Version 0.9.5
Mozilla ≫ Mozilla Version 0.9.6
Mozilla ≫ Mozilla Version 0.9.7
Mozilla ≫ Mozilla Version 0.9.8
Mozilla ≫ Mozilla Version 0.9.9
Mozilla ≫ Mozilla Version 0.9.35
Mozilla ≫ Mozilla Version 0.9.48
Mozilla ≫ Mozilla Version 1.0
Mozilla ≫ Mozilla Version 1.0 Update rc1
Mozilla ≫ Mozilla Version 1.0 Update rc2
Mozilla ≫ Mozilla Version 1.0.1
Mozilla ≫ Mozilla Version 1.0.2
Mozilla ≫ Mozilla Version 1.1
Mozilla ≫ Mozilla Version 1.1 Update alpha
Mozilla ≫ Mozilla Version 1.1 Update beta
Mozilla ≫ Mozilla Version 1.2
Mozilla ≫ Mozilla Version 1.2 Update alpha
Mozilla ≫ Mozilla Version 1.2 Update beta
Mozilla ≫ Mozilla Version 1.2.1
Mozilla ≫ Mozilla Version 1.3
Mozilla ≫ Mozilla Version 1.3.1
Mozilla ≫ Mozilla Version 1.4
Mozilla ≫ Mozilla Version 1.4 Update alpha
Mozilla ≫ Mozilla Version 1.4 Update beta
Mozilla ≫ Mozilla Version 1.4.1
Mozilla ≫ Mozilla Version 1.4.2
Mozilla ≫ Mozilla Version 1.4.4
Mozilla ≫ Mozilla Version 1.5
Mozilla ≫ Mozilla Version 1.5.1
Mozilla ≫ Mozilla Version 1.6
Mozilla ≫ Thunderbird Version 0.1
Mozilla ≫ Thunderbird Version 0.2
Mozilla ≫ Thunderbird Version 0.3
Mozilla ≫ Thunderbird Version 0.4
Mozilla ≫ Thunderbird Version 0.5
Mozilla ≫ Thunderbird Version 0.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.92% 0.557
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:082