CVE-2005-0142

2005-05-0204:00:00

mitre

web.nvd.nist.gov

cve-2005-0142

firefox

thunderbird

mozilla

file permissions

web content

local user access

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

Percentile

5.1%

JSON

Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.

Affected configurations

Nvd

Node

mozillafirefoxMatch0.9

mozillamozillaMatch1.7

mozillamozillaMatch1.7rc3

mozillamozillaMatch1.7.1

mozillamozillaMatch1.7.2

mozillamozillaMatch1.7.3

mozillathunderbirdMatch0.6

mozillathunderbirdMatch0.7

mozillathunderbirdMatch0.8

VendorProductVersionCPE
mozillafirefox0.9cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*
mozillamozilla1.7cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*
mozillamozilla1.7cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*
mozillamozilla1.7.1cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*
mozillamozilla1.7.2cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*
mozillamozilla1.7.3cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*
mozillathunderbird0.6cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*
mozillathunderbird0.7cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*
mozillathunderbird0.8cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	0.9	cpe:2.3:a:mozilla:firefox:0.9:::::::*
mozilla	mozilla	1.7	cpe:2.3:a:mozilla:mozilla:1.7:::::::*
mozilla	mozilla	1.7	cpe:2.3:a:mozilla:mozilla:1.7:rc3::::::
mozilla	mozilla	1.7.1	cpe:2.3:a:mozilla:mozilla:1.7.1:::::::*
mozilla	mozilla	1.7.2	cpe:2.3:a:mozilla:mozilla:1.7.2:::::::*
mozilla	mozilla	1.7.3	cpe:2.3:a:mozilla:mozilla:1.7.3:::::::*
mozilla	thunderbird	0.6	cpe:2.3:a:mozilla:thunderbird:0.6:::::::*
mozilla	thunderbird	0.7	cpe:2.3:a:mozilla:thunderbird:0.7:::::::*
mozilla	thunderbird	0.8	cpe:2.3:a:mozilla:thunderbird:0.8:::::::*