CVE-2007-5335 — Sensitive Information Exposure in Mozilla Firefox

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.9%
top 24.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedOct 24
Latest updateMay 1

Description

Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox2.0.0.7

🔴Vulnerability Details

1
GHSA
GHSA-7m2r-r8f2-p7vc: Mozilla Firefox 2↗2022-05-01
▶

📋Vendor Advisories

1
Ubuntu
Firefox vulnerabilities↗2007-10-22
▶