5

CVE-2011-0071

Exploit

Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

Data is provided by the National Vulnerability Database (NVD)
MozillaFirefox Version3.6
   MicrosoftWindows
MozillaFirefox Version3.6.2
   MicrosoftWindows
MozillaFirefox Version3.6.3
   MicrosoftWindows
MozillaFirefox Version3.6.4
   MicrosoftWindows
MozillaFirefox Version3.6.6
   MicrosoftWindows
MozillaFirefox Version3.6.7
   MicrosoftWindows
MozillaFirefox Version3.6.8
   MicrosoftWindows
MozillaFirefox Version3.6.9
   MicrosoftWindows
MozillaFirefox Version3.6.10
   MicrosoftWindows
MozillaFirefox Version3.6.11
   MicrosoftWindows
MozillaFirefox Version3.6.12
   MicrosoftWindows
MozillaFirefox Version3.6.13
   MicrosoftWindows
MozillaFirefox Version3.6.14
   MicrosoftWindows
MozillaFirefox Version3.6.15
   MicrosoftWindows
MozillaFirefox Version3.6.16
   MicrosoftWindows
MozillaSeamonkey Version <= 2.0.13
   MicrosoftWindows
MozillaSeamonkey Version1.0
   MicrosoftWindows
MozillaSeamonkey Version1.0 Updatealpha
   MicrosoftWindows
MozillaSeamonkey Version1.0 Updatebeta
   MicrosoftWindows
MozillaSeamonkey Version1.0.1
   MicrosoftWindows
MozillaSeamonkey Version1.0.2
   MicrosoftWindows
MozillaSeamonkey Version1.0.3
   MicrosoftWindows
MozillaSeamonkey Version1.0.4
   MicrosoftWindows
MozillaSeamonkey Version1.0.5
   MicrosoftWindows
MozillaSeamonkey Version1.0.6
   MicrosoftWindows
MozillaSeamonkey Version1.0.7
   MicrosoftWindows
MozillaSeamonkey Version1.0.8
   MicrosoftWindows
MozillaSeamonkey Version1.0.9
   MicrosoftWindows
MozillaSeamonkey Version1.1
   MicrosoftWindows
MozillaSeamonkey Version1.1 Updatealpha
   MicrosoftWindows
MozillaSeamonkey Version1.1 Updatebeta
   MicrosoftWindows
MozillaSeamonkey Version1.1.1
   MicrosoftWindows
MozillaSeamonkey Version1.1.2
   MicrosoftWindows
MozillaSeamonkey Version1.1.3
   MicrosoftWindows
MozillaSeamonkey Version1.1.4
   MicrosoftWindows
MozillaSeamonkey Version1.1.5
   MicrosoftWindows
MozillaSeamonkey Version1.1.6
   MicrosoftWindows
MozillaSeamonkey Version1.1.7
   MicrosoftWindows
MozillaSeamonkey Version1.1.8
   MicrosoftWindows
MozillaSeamonkey Version1.1.9
   MicrosoftWindows
MozillaSeamonkey Version1.1.10
   MicrosoftWindows
MozillaSeamonkey Version1.1.11
   MicrosoftWindows
MozillaSeamonkey Version1.1.12
   MicrosoftWindows
MozillaSeamonkey Version1.1.13
   MicrosoftWindows
MozillaSeamonkey Version1.1.14
   MicrosoftWindows
MozillaSeamonkey Version1.1.15
   MicrosoftWindows
MozillaSeamonkey Version1.1.16
   MicrosoftWindows
MozillaSeamonkey Version1.1.17
   MicrosoftWindows
MozillaSeamonkey Version1.1.18
   MicrosoftWindows
MozillaSeamonkey Version1.1.19
   MicrosoftWindows
MozillaSeamonkey Version1.5.0.8
   MicrosoftWindows
MozillaSeamonkey Version1.5.0.9
   MicrosoftWindows
MozillaSeamonkey Version1.5.0.10
   MicrosoftWindows
MozillaSeamonkey Version2.0
   MicrosoftWindows
MozillaSeamonkey Version2.0 Updatealpha_1
   MicrosoftWindows
MozillaSeamonkey Version2.0 Updatealpha_2
   MicrosoftWindows
MozillaSeamonkey Version2.0 Updatealpha_3
   MicrosoftWindows
MozillaSeamonkey Version2.0 Updatebeta_1
   MicrosoftWindows
MozillaSeamonkey Version2.0 Updatebeta_2
   MicrosoftWindows
MozillaSeamonkey Version2.0 Updaterc1
   MicrosoftWindows
MozillaSeamonkey Version2.0 Updaterc2
   MicrosoftWindows
MozillaSeamonkey Version2.0.1
   MicrosoftWindows
MozillaSeamonkey Version2.0.2
   MicrosoftWindows
MozillaSeamonkey Version2.0.3
   MicrosoftWindows
MozillaSeamonkey Version2.0.4
   MicrosoftWindows
MozillaSeamonkey Version2.0.5
   MicrosoftWindows
MozillaSeamonkey Version2.0.6
   MicrosoftWindows
MozillaSeamonkey Version2.0.7
   MicrosoftWindows
MozillaSeamonkey Version2.0.8
   MicrosoftWindows
MozillaSeamonkey Version2.0.9
   MicrosoftWindows
MozillaSeamonkey Version2.0.10
   MicrosoftWindows
MozillaSeamonkey Version2.0.11
   MicrosoftWindows
MozillaSeamonkey Version2.0.12
   MicrosoftWindows
MozillaFirefox Version <= 3.5.18
   MicrosoftWindows
MozillaFirefox Version1.0
   MicrosoftWindows
MozillaFirefox Version1.0 Updatepreview_release
   MicrosoftWindows
MozillaFirefox Version1.0.1
   MicrosoftWindows
MozillaFirefox Version1.0.2
   MicrosoftWindows
MozillaFirefox Version1.0.3
   MicrosoftWindows
MozillaFirefox Version1.0.4
   MicrosoftWindows
MozillaFirefox Version1.0.5
   MicrosoftWindows
MozillaFirefox Version1.0.6
   MicrosoftWindows
MozillaFirefox Version1.0.7
   MicrosoftWindows
MozillaFirefox Version1.0.8
   MicrosoftWindows
MozillaFirefox Version1.5
   MicrosoftWindows
MozillaFirefox Version1.5 Updatebeta1
   MicrosoftWindows
MozillaFirefox Version1.5 Updatebeta2
   MicrosoftWindows
MozillaFirefox Version1.5.0.1
   MicrosoftWindows
MozillaFirefox Version1.5.0.2
   MicrosoftWindows
MozillaFirefox Version1.5.0.3
   MicrosoftWindows
MozillaFirefox Version1.5.0.4
   MicrosoftWindows
MozillaFirefox Version1.5.0.5
   MicrosoftWindows
MozillaFirefox Version1.5.0.6
   MicrosoftWindows
MozillaFirefox Version1.5.0.7
   MicrosoftWindows
MozillaFirefox Version1.5.0.8
   MicrosoftWindows
MozillaFirefox Version1.5.0.9
   MicrosoftWindows
MozillaFirefox Version1.5.0.10
   MicrosoftWindows
MozillaFirefox Version1.5.0.11
   MicrosoftWindows
MozillaFirefox Version1.5.0.12
   MicrosoftWindows
MozillaFirefox Version1.5.1
   MicrosoftWindows
MozillaFirefox Version1.5.2
   MicrosoftWindows
MozillaFirefox Version1.5.3
   MicrosoftWindows
MozillaFirefox Version1.5.4
   MicrosoftWindows
MozillaFirefox Version1.5.5
   MicrosoftWindows
MozillaFirefox Version1.5.6
   MicrosoftWindows
MozillaFirefox Version1.5.7
   MicrosoftWindows
MozillaFirefox Version1.5.8
   MicrosoftWindows
MozillaFirefox Version2.0
   MicrosoftWindows
MozillaFirefox Version2.0.0.1
   MicrosoftWindows
MozillaFirefox Version2.0.0.2
   MicrosoftWindows
MozillaFirefox Version2.0.0.3
   MicrosoftWindows
MozillaFirefox Version2.0.0.4
   MicrosoftWindows
MozillaFirefox Version2.0.0.5
   MicrosoftWindows
MozillaFirefox Version2.0.0.6
   MicrosoftWindows
MozillaFirefox Version2.0.0.7
   MicrosoftWindows
MozillaFirefox Version2.0.0.8
   MicrosoftWindows
MozillaFirefox Version2.0.0.9
   MicrosoftWindows
MozillaFirefox Version2.0.0.10
   MicrosoftWindows
MozillaFirefox Version2.0.0.11
   MicrosoftWindows
MozillaFirefox Version2.0.0.12
   MicrosoftWindows
MozillaFirefox Version2.0.0.13
   MicrosoftWindows
MozillaFirefox Version2.0.0.14
   MicrosoftWindows
MozillaFirefox Version2.0.0.15
   MicrosoftWindows
MozillaFirefox Version2.0.0.16
   MicrosoftWindows
MozillaFirefox Version2.0.0.17
   MicrosoftWindows
MozillaFirefox Version2.0.0.18
   MicrosoftWindows
MozillaFirefox Version2.0.0.19
   MicrosoftWindows
MozillaFirefox Version2.0.0.20
   MicrosoftWindows
MozillaFirefox Version3.0
   MicrosoftWindows
MozillaFirefox Version3.0.1
   MicrosoftWindows
MozillaFirefox Version3.0.2
   MicrosoftWindows
MozillaFirefox Version3.0.3
   MicrosoftWindows
MozillaFirefox Version3.0.4
   MicrosoftWindows
MozillaFirefox Version3.0.5
   MicrosoftWindows
MozillaFirefox Version3.0.6
   MicrosoftWindows
MozillaFirefox Version3.0.7
   MicrosoftWindows
MozillaFirefox Version3.0.8
   MicrosoftWindows
MozillaFirefox Version3.0.9
   MicrosoftWindows
MozillaFirefox Version3.0.10
   MicrosoftWindows
MozillaFirefox Version3.0.11
   MicrosoftWindows
MozillaFirefox Version3.0.12
   MicrosoftWindows
MozillaFirefox Version3.0.13
   MicrosoftWindows
MozillaFirefox Version3.0.14
   MicrosoftWindows
MozillaFirefox Version3.0.15
   MicrosoftWindows
MozillaFirefox Version3.0.16
   MicrosoftWindows
MozillaFirefox Version3.0.17
   MicrosoftWindows
MozillaFirefox Version3.5
   MicrosoftWindows
MozillaFirefox Version3.5.1
   MicrosoftWindows
MozillaFirefox Version3.5.2
   MicrosoftWindows
MozillaFirefox Version3.5.3
   MicrosoftWindows
MozillaFirefox Version3.5.4
   MicrosoftWindows
MozillaFirefox Version3.5.5
   MicrosoftWindows
MozillaFirefox Version3.5.6
   MicrosoftWindows
MozillaFirefox Version3.5.7
   MicrosoftWindows
MozillaFirefox Version3.5.8
   MicrosoftWindows
MozillaFirefox Version3.5.9
   MicrosoftWindows
MozillaFirefox Version3.5.10
   MicrosoftWindows
MozillaFirefox Version3.5.11
   MicrosoftWindows
MozillaFirefox Version3.5.12
   MicrosoftWindows
MozillaFirefox Version3.5.13
   MicrosoftWindows
MozillaFirefox Version3.5.14
   MicrosoftWindows
MozillaFirefox Version3.5.15
   MicrosoftWindows
MozillaFirefox Version3.5.16
   MicrosoftWindows
MozillaFirefox Version3.5.17
   MicrosoftWindows
MozillaThunderbird Version <= 3.1.9
   MicrosoftWindows
MozillaThunderbird Version0.1
   MicrosoftWindows
MozillaThunderbird Version0.2
   MicrosoftWindows
MozillaThunderbird Version0.3
   MicrosoftWindows
MozillaThunderbird Version0.4
   MicrosoftWindows
MozillaThunderbird Version0.5
   MicrosoftWindows
MozillaThunderbird Version0.6
   MicrosoftWindows
MozillaThunderbird Version0.7
   MicrosoftWindows
MozillaThunderbird Version0.7.1
   MicrosoftWindows
MozillaThunderbird Version0.7.2
   MicrosoftWindows
MozillaThunderbird Version0.7.3
   MicrosoftWindows
MozillaThunderbird Version0.8
   MicrosoftWindows
MozillaThunderbird Version0.9
   MicrosoftWindows
MozillaThunderbird Version1.0
   MicrosoftWindows
MozillaThunderbird Version1.0.1
   MicrosoftWindows
MozillaThunderbird Version1.0.2
   MicrosoftWindows
MozillaThunderbird Version1.0.3
   MicrosoftWindows
MozillaThunderbird Version1.0.4
   MicrosoftWindows
MozillaThunderbird Version1.0.5
   MicrosoftWindows
MozillaThunderbird Version1.0.6
   MicrosoftWindows
MozillaThunderbird Version1.0.7
   MicrosoftWindows
MozillaThunderbird Version1.0.8
   MicrosoftWindows
MozillaThunderbird Version1.5
   MicrosoftWindows
MozillaThunderbird Version1.5 Updatebeta2
   MicrosoftWindows
MozillaThunderbird Version1.5.0.1
   MicrosoftWindows
MozillaThunderbird Version1.5.0.2
   MicrosoftWindows
MozillaThunderbird Version1.5.0.3
   MicrosoftWindows
MozillaThunderbird Version1.5.0.4
   MicrosoftWindows
MozillaThunderbird Version1.5.0.5
   MicrosoftWindows
MozillaThunderbird Version1.5.0.6
   MicrosoftWindows
MozillaThunderbird Version1.5.0.7
   MicrosoftWindows
MozillaThunderbird Version1.5.0.8
   MicrosoftWindows
MozillaThunderbird Version1.5.0.9
   MicrosoftWindows
MozillaThunderbird Version1.5.0.10
   MicrosoftWindows
MozillaThunderbird Version1.5.0.11
   MicrosoftWindows
MozillaThunderbird Version1.5.0.12
   MicrosoftWindows
MozillaThunderbird Version1.5.0.13
   MicrosoftWindows
MozillaThunderbird Version1.5.0.14
   MicrosoftWindows
MozillaThunderbird Version1.5.1
   MicrosoftWindows
MozillaThunderbird Version1.5.2
   MicrosoftWindows
MozillaThunderbird Version1.7.1
   MicrosoftWindows
MozillaThunderbird Version1.7.3
   MicrosoftWindows
MozillaThunderbird Version2.0
   MicrosoftWindows
MozillaThunderbird Version2.0.0.0
   MicrosoftWindows
MozillaThunderbird Version2.0.0.1
   MicrosoftWindows
MozillaThunderbird Version2.0.0.2
   MicrosoftWindows
MozillaThunderbird Version2.0.0.3
   MicrosoftWindows
MozillaThunderbird Version2.0.0.4
   MicrosoftWindows
MozillaThunderbird Version2.0.0.5
   MicrosoftWindows
MozillaThunderbird Version2.0.0.6
   MicrosoftWindows
MozillaThunderbird Version2.0.0.7
   MicrosoftWindows
MozillaThunderbird Version2.0.0.8
   MicrosoftWindows
MozillaThunderbird Version2.0.0.9
   MicrosoftWindows
MozillaThunderbird Version2.0.0.12
   MicrosoftWindows
MozillaThunderbird Version2.0.0.14
   MicrosoftWindows
MozillaThunderbird Version2.0.0.16
   MicrosoftWindows
MozillaThunderbird Version2.0.0.17
   MicrosoftWindows
MozillaThunderbird Version2.0.0.18
   MicrosoftWindows
MozillaThunderbird Version2.0.0.19
   MicrosoftWindows
MozillaThunderbird Version2.0.0.21
   MicrosoftWindows
MozillaThunderbird Version2.0.0.22
   MicrosoftWindows
MozillaThunderbird Version2.0.0.23
   MicrosoftWindows
MozillaThunderbird Version3.0
   MicrosoftWindows
MozillaThunderbird Version3.0.1
   MicrosoftWindows
MozillaThunderbird Version3.0.2
   MicrosoftWindows
MozillaThunderbird Version3.0.3
   MicrosoftWindows
MozillaThunderbird Version3.0.4
   MicrosoftWindows
MozillaThunderbird Version3.0.5
   MicrosoftWindows
MozillaThunderbird Version3.0.6
   MicrosoftWindows
MozillaThunderbird Version3.0.7
   MicrosoftWindows
MozillaThunderbird Version3.0.8
   MicrosoftWindows
MozillaThunderbird Version3.0.9
   MicrosoftWindows
MozillaThunderbird Version3.0.10
   MicrosoftWindows
MozillaThunderbird Version3.0.11
   MicrosoftWindows
MozillaThunderbird Version3.1
   MicrosoftWindows
MozillaThunderbird Version3.1.1
   MicrosoftWindows
MozillaThunderbird Version3.1.2
   MicrosoftWindows
MozillaThunderbird Version3.1.3
   MicrosoftWindows
MozillaThunderbird Version3.1.4
   MicrosoftWindows
MozillaThunderbird Version3.1.5
   MicrosoftWindows
MozillaThunderbird Version3.1.6
   MicrosoftWindows
MozillaThunderbird Version3.1.7
   MicrosoftWindows
MozillaThunderbird Version3.1.8
   MicrosoftWindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.67% 0.804
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.