CVE-2007-5337: Infoleak
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5337?
The severity of CVE-2007-5337 is classified as moderate due to the potential for unauthorized file access.
How do I fix CVE-2007-5337?
To fix CVE-2007-5337, update Mozilla Firefox to version 2.0.0.8 or later and SeaMonkey to version 1.1.5 or later.
What products are affected by CVE-2007-5337?
CVE-2007-5337 affects Mozilla Firefox versions earlier than 2.0.0.8 and SeaMonkey versions earlier than 1.1.5 on Linux systems with gnome-vfs support.
What vulnerability does CVE-2007-5337 represent?
CVE-2007-5337 represents a vulnerability that allows remote attackers to read arbitrary files on SSH/sftp servers due to improper handling of URIs.
When was CVE-2007-5337 reported?
CVE-2007-5337 was reported in 2007, impacting early versions of Firefox and SeaMonkey.