CVE-2005-0142: Low severity Mozilla Thunderbird vulnerability

Published Jan 29, 2005

Updated

Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.

Affected Software

9 affected components

Mozilla Thunderbird=0.6

Mozilla Mozilla=1.7

Mozilla Firefox=0.9

Mozilla Mozilla=1.7.1

Mozilla Thunderbird=0.7

Mozilla Mozilla=1.7.2

Mozilla Mozilla=1.7-rc3

Mozilla Thunderbird=0.8

Mozilla Mozilla=1.7.3

Remediation

Patch Available

http://www.redhat.com/support/errata/RHSA-2005-335.html

Event History

Jan 29, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0142?

CVE-2005-0142 is classified as a moderate severity vulnerability due to the risk of local users accessing sensitive data.

How do I fix CVE-2005-0142?

To fix CVE-2005-0142, upgrade to Firefox version 1.0 or later, Thunderbird version 1.0 or later, or Mozilla 1.7.5 or later.

What types of software are affected by CVE-2005-0142?

CVE-2005-0142 affects Firefox versions before 1.0, Thunderbird versions before 1.0, and various versions of Mozilla 1.7.

What is the impact of CVE-2005-0142?

The impact of CVE-2005-0142 is that it allows local users to read certain web content or attachments belonging to other users due to improper file permissions.

Can CVE-2005-0142 be exploited remotely?

CVE-2005-0142 cannot be exploited remotely as it only affects local access permissions.