← Back

CVE-2011-0071

nvd nist
Published: May 7, 2011Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

Affected (247)

Mozilla
3 products
Firefox
Seamonkey
Thunderbird
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Version 3.6.10
Firefox
Version 3.6.11
Firefox
Version 3.6.12
Firefox
Version 3.6.13
Firefox
Version 3.6.14
Firefox
Version 3.6.15
Firefox
Version 3.6.16
Firefox
Version 3.6.2
Firefox
Version 3.6.3
Firefox
Version 3.6.4
Firefox
Version 3.6.6
Firefox
Version 3.6.7
Firefox
Version 3.6.8
Firefox
Version 3.6.9
Firefox
Version 3.6
Configuration B
58 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Seamonkey
Up to 2.0.13
Seamonkey
Version 1.0.1
Seamonkey
Version 1.0.2
Seamonkey
Version 1.0.3
Seamonkey
Version 1.0.4
Seamonkey
Version 1.0.5
Seamonkey
Version 1.0.6
Seamonkey
Version 1.0.7
Seamonkey
Version 1.0.8
Seamonkey
Version 1.0.9
Seamonkey
Version 1.0
Seamonkey
Version 1.0 alpha
Seamonkey
Version 1.0 beta
Seamonkey
Version 1.1.10
Seamonkey
Version 1.1.11
Seamonkey
Version 1.1.12
Seamonkey
Version 1.1.13
Seamonkey
Version 1.1.14
Seamonkey
Version 1.1.15
Seamonkey
Version 1.1.16
Seamonkey
Version 1.1.17
Seamonkey
Version 1.1.18
Seamonkey
Version 1.1.19
Seamonkey
Version 1.1.1
Seamonkey
Version 1.1.2
Seamonkey
Version 1.1.3
Seamonkey
Version 1.1.4
Seamonkey
Version 1.1.5
Seamonkey
Version 1.1.6
Seamonkey
Version 1.1.7
Seamonkey
Version 1.1.8
Seamonkey
Version 1.1.9
Seamonkey
Version 1.1
Seamonkey
Version 1.1 alpha
Seamonkey
Version 1.1 beta
Seamonkey
Version 1.5.0.10
Seamonkey
Version 1.5.0.8
Seamonkey
Version 1.5.0.9
Seamonkey
Version 2.0.10
Seamonkey
Version 2.0.11
Seamonkey
Version 2.0.12
Seamonkey
Version 2.0.1
Seamonkey
Version 2.0.2
Seamonkey
Version 2.0.3
Seamonkey
Version 2.0.4
Seamonkey
Version 2.0.5
Seamonkey
Version 2.0.6
Seamonkey
Version 2.0.7
Seamonkey
Version 2.0.8
Seamonkey
Version 2.0.9
Seamonkey
Version 2.0
Seamonkey
Version 2.0 alpha_1
Seamonkey
Version 2.0 alpha_2
Seamonkey
Version 2.0 alpha_3
Seamonkey
Version 2.0 beta_1
Seamonkey
Version 2.0 beta_2
Seamonkey
Version 2.0 rc1
Seamonkey
Version 2.0 rc2
Configuration C
91 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Up to 3.5.18
Firefox
Version 1.0.1
Firefox
Version 1.0.2
Firefox
Version 1.0.3
Firefox
Version 1.0.4
Firefox
Version 1.0.5
Firefox
Version 1.0.6
Firefox
Version 1.0.7
Firefox
Version 1.0.8
Firefox
Version 1.0
Firefox
Version 1.0 preview_release
Firefox
Version 1.5.0.10
Firefox
Version 1.5.0.11
Firefox
Version 1.5.0.12
Firefox
Version 1.5.0.1
Firefox
Version 1.5.0.2
Firefox
Version 1.5.0.3
Firefox
Version 1.5.0.4
Firefox
Version 1.5.0.5
Firefox
Version 1.5.0.6
Firefox
Version 1.5.0.7
Firefox
Version 1.5.0.8
Firefox
Version 1.5.0.9
Firefox
Version 1.5.1
Firefox
Version 1.5.2
Firefox
Version 1.5.3
Firefox
Version 1.5.4
Firefox
Version 1.5.5
Firefox
Version 1.5.6
Firefox
Version 1.5.7
Firefox
Version 1.5.8
Firefox
Version 1.5
Firefox
Version 1.5 beta1
Firefox
Version 1.5 beta2
Firefox
Version 2.0.0.10
Firefox
Version 2.0.0.11
Firefox
Version 2.0.0.12
Firefox
Version 2.0.0.13
Firefox
Version 2.0.0.14
Firefox
Version 2.0.0.15
Firefox
Version 2.0.0.16
Firefox
Version 2.0.0.17
Firefox
Version 2.0.0.18
Firefox
Version 2.0.0.19
Firefox
Version 2.0.0.1
Firefox
Version 2.0.0.20
Firefox
Version 2.0.0.2
Firefox
Version 2.0.0.3
Firefox
Version 2.0.0.4
Firefox
Version 2.0.0.5
Firefox
Version 2.0.0.6
Firefox
Version 2.0.0.7
Firefox
Version 2.0.0.8
Firefox
Version 2.0.0.9
Firefox
Version 2.0
Firefox
Version 3.0.10
Firefox
Version 3.0.11
Firefox
Version 3.0.12
Firefox
Version 3.0.13
Firefox
Version 3.0.14
Firefox
Version 3.0.15
Firefox
Version 3.0.16
Firefox
Version 3.0.17
Firefox
Version 3.0.1
Firefox
Version 3.0.2
Firefox
Version 3.0.3
Firefox
Version 3.0.4
Firefox
Version 3.0.5
Firefox
Version 3.0.6
Firefox
Version 3.0.7
Firefox
Version 3.0.8
Firefox
Version 3.0.9
Firefox
Version 3.0
Firefox
Version 3.5.10
Firefox
Version 3.5.11
Firefox
Version 3.5.12
Firefox
Version 3.5.13
Firefox
Version 3.5.14
Firefox
Version 3.5.15
Firefox
Version 3.5.16
Firefox
Version 3.5.17
Firefox
Version 3.5.1
Firefox
Version 3.5.2
Firefox
Version 3.5.3
Firefox
Version 3.5.4
Firefox
Version 3.5.5
Firefox
Version 3.5.6
Firefox
Version 3.5.7
Firefox
Version 3.5.8
Firefox
Version 3.5.9
Firefox
Version 3.5
Configuration D
83 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mozilla
Thunderbird
Up to 3.1.9
Thunderbird
Version 0.1
Thunderbird
Version 0.2
Thunderbird
Version 0.3
Thunderbird
Version 0.4
Thunderbird
Version 0.5
Thunderbird
Version 0.6
Thunderbird
Version 0.7.1
Thunderbird
Version 0.7.2
Thunderbird
Version 0.7.3
Thunderbird
Version 0.7
Thunderbird
Version 0.8
Thunderbird
Version 0.9
Thunderbird
Version 1.0.1
Thunderbird
Version 1.0.2
Thunderbird
Version 1.0.3
Thunderbird
Version 1.0.4
Thunderbird
Version 1.0.5
Thunderbird
Version 1.0.6
Thunderbird
Version 1.0.7
Thunderbird
Version 1.0.8
Thunderbird
Version 1.0
Thunderbird
Version 1.5.0.10
Thunderbird
Version 1.5.0.11
Thunderbird
Version 1.5.0.12
Thunderbird
Version 1.5.0.13
Thunderbird
Version 1.5.0.14
Thunderbird
Version 1.5.0.1
Thunderbird
Version 1.5.0.2
Thunderbird
Version 1.5.0.3
Thunderbird
Version 1.5.0.4
Thunderbird
Version 1.5.0.5
Thunderbird
Version 1.5.0.6
Thunderbird
Version 1.5.0.7
Thunderbird
Version 1.5.0.8
Thunderbird
Version 1.5.0.9
Thunderbird
Version 1.5.1
Thunderbird
Version 1.5.2
Thunderbird
Version 1.5
Thunderbird
Version 1.5 beta2
Thunderbird
Version 1.7.1
Thunderbird
Version 1.7.3
Thunderbird
Version 2.0.0.0
Thunderbird
Version 2.0.0.12
Thunderbird
Version 2.0.0.14
Thunderbird
Version 2.0.0.16
Thunderbird
Version 2.0.0.17
Thunderbird
Version 2.0.0.18
Thunderbird
Version 2.0.0.19
Thunderbird
Version 2.0.0.1
Thunderbird
Version 2.0.0.21
Thunderbird
Version 2.0.0.22
Thunderbird
Version 2.0.0.23
Thunderbird
Version 2.0.0.2
Thunderbird
Version 2.0.0.3
Thunderbird
Version 2.0.0.4
Thunderbird
Version 2.0.0.5
Thunderbird
Version 2.0.0.6
Thunderbird
Version 2.0.0.7
Thunderbird
Version 2.0.0.8
Thunderbird
Version 2.0.0.9
Thunderbird
Version 2.0
Thunderbird
Version 3.0.10
Thunderbird
Version 3.0.11
Thunderbird
Version 3.0.1
Thunderbird
Version 3.0.2
Thunderbird
Version 3.0.3
Thunderbird
Version 3.0.4
Thunderbird
Version 3.0.5
Thunderbird
Version 3.0.6
Thunderbird
Version 3.0.7
Thunderbird
Version 3.0.8
Thunderbird
Version 3.0.9
Thunderbird
Version 3.0
Thunderbird
Version 3.1.1
Thunderbird
Version 3.1.2
Thunderbird
Version 3.1.3
Thunderbird
Version 3.1.4
Thunderbird
Version 3.1.5
Thunderbird
Version 3.1.6
Thunderbird
Version 3.1.7
Thunderbird
Version 3.1.8
Thunderbird
Version 3.1
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (18)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.