Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox文件下载管理漏洞
Vulnerability Description
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Linux上的Mozilla Firefox 3.6a1,3.5.3,3.5.2及之前的3.5.x版本,3.0.14及之前的2.x和3.x版本为从Downloads窗口选择出来的文件使用一个可预测的/tmp路径名。本地用户可在下载开始之前在a /tmp位置放置一个文件来替代任意一个下载文件。
CVSS Information
N/A
Vulnerability Type
N/A