CVE-2007-3072: Path Traversal

Published Jun 6, 2007

Updated

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrary files via ..%5C (dot dot encoded backslash) sequences in a resource:// URI.

Affected Software

4 affected components

Mozilla Firefox=2.0.0.2

Mozilla Firefox=2.0

Mozilla Firefox=2.0.0.3

Mozilla Firefox=2.0.0.1

Event History

Jun 6, 2007

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3072?

CVE-2007-3072 is considered a high severity vulnerability due to its ability to allow remote attackers to read arbitrary files from the system.

How do I fix CVE-2007-3072?

To mitigate CVE-2007-3072, upgrade Mozilla Firefox to version 2.0.0.4 or later as it addresses this vulnerability.

Which versions of Mozilla Firefox are affected by CVE-2007-3072?

CVE-2007-3072 affects Mozilla Firefox versions 2.0, 2.0.0.1, 2.0.0.2, and 2.0.0.3.

Can CVE-2007-3072 be exploited without user interaction?

Yes, CVE-2007-3072 can be exploited remotely without any user interaction when a user visits a specially crafted URL.

What types of files can be accessed using CVE-2007-3072?

CVE-2007-3072 enables attackers to access sensitive files on the user's system, potentially leading to information disclosure.