CVE-2005-0142

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-0142

firefox

thunderbird

mozilla

file permissions

web content

local user access

nvd

5.8 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.

CPENameOperatorVersion
mozilla:thunderbirdmozilla thunderbirdeq0.6
mozilla:mozillamozillaeq1.7
mozilla:firefoxmozilla firefoxeq0.9
mozilla:mozillamozillaeq1.7.1
mozilla:thunderbirdmozilla thunderbirdeq0.7
mozilla:mozillamozillaeq1.7.2
mozilla:thunderbirdmozilla thunderbirdeq0.8
mozilla:mozillamozillaeq1.7.3

CPE	Name	Operator	Version
mozilla:thunderbird	mozilla thunderbird	eq	0.6
mozilla:mozilla	mozilla	eq	1.7
mozilla:firefox	mozilla firefox	eq	0.9
mozilla:mozilla	mozilla	eq	1.7.1
mozilla:thunderbird	mozilla thunderbird	eq	0.7
mozilla:mozilla	mozilla	eq	1.7.2
mozilla:thunderbird	mozilla thunderbird	eq	0.8
mozilla:mozilla	mozilla	eq	1.7.3