CVE-2004-2225

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.

Ссылки

http://secunia.com/advisories/12708
Patch
Vendor Advisory
http://securitytracker.com/id?1011501
Patch
http://www.mozilla.org/projects/security/older-vulnerabilities.html#firefox0.10.1
http://www.osvdb.org/10478
Patch
http://www.securityfocus.com/bid/11311
Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=259708
Patch
Vendor Advisory
http://secunia.com/advisories/12708
Patch
Vendor Advisory
http://securitytracker.com/id?1011501
Patch
http://www.mozilla.org/projects/security/older-vulnerabilities.html#firefox0.10.1
http://www.osvdb.org/10478
Patch
http://www.securityfocus.com/bid/11311
Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=259708
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00783

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-2225

debian

больше 20 лет назад

Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitr ...

GHSA-mh57-wf4x-427m

github

больше 3 лет назад