CVE-2004-2225 — Mozilla Firefox vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.8%
top 26.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedDec 31
Latest updateApr 29

Description

Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox7 versions+6

Patches

Patch: secunia.com ↗Patch: securitytracker.com ↗Patch: www.osvdb.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-mh57-wf4x-427m: Mozilla Firefox before 0↗2022-04-29
▶