First published: Fri Jun 02 2006(Updated: )
Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla SeaMonkey | <=1.0.1 | |
Mozilla Firefox | <=1.5.0.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-2782 has a medium severity rating due to its ability to allow attackers to read arbitrary files.
To fix CVE-2006-2782, users should update their Firefox or SeaMonkey browsers to a version later than the affected ones.
CVE-2006-2782 affects Mozilla Firefox versions up to 1.5.0.3.
CVE-2006-2782 impacts SeaMonkey versions up to 1.0.1.
CVE-2006-2782 is classified as a file access vulnerability.