CVE-2011-0071

Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.82% chance of exploitation in the next 30 days, 86th percentile

Published

2011-05-07

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://bugzilla.mozilla.org/show_bug.cgi?id=624764

References

• CVE Record
• NVD entry

Related

• CVE-2011-0070
• CVE-2011-0073
• CVE-2011-0065
• CVE-2011-0096
• CVE-2011-0063
• CVE-2011-0104