Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox "file:// URL" 本地文件访问漏洞
Vulnerability Description
Firefox是Mozilla所发布的开源WEB浏览器 。 Firefox中的多个安全漏洞,由于代码共享，Thunderbird和SeaMonkey也受这些漏洞的影响 。如果用户通过file:// URL加载了恶意的本地内容就可能导致该内容访问其他本地数据。该漏洞已经通过file://example.com/C:/ URL证实。
CVSS Information
N/A
Vulnerability Type
N/A