CVE-2007-3072

CVE-2007-3072 describes a directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows. The issue allows a remote attacker to read arbitrary files via dot-dot-encoded backslash sequences ("..%5C") in a resource:// URI, leading to complete confidentiality impact . The NVD entry l...

CVE-2006-3072

CVE-2006-3072 affects Symantec Security Information Manager prior to 4.0.2.29 HOTFIX 1, where the M4 Macro Library processes crafted rule definitions that produce dangerous Java code during M4 transformation, enabling local users to execute arbitrary commands. The vulnerability is local in scope ...

CVE-2005-3072

CVE-2005-3072 corresponds to a SQL injection in Interchange that affects versions 4.9.3 up to 5.2.0, specifically via the forum/submit.html handling. The vulnerability allows remote attackers to execute arbitrary SQL commands; the exact injection vectors are not clearly described in the provided ...