Lucene search
RootSSV:12383HistorySep 23, 2009 - 12:00 a.m.
Mozilla Firefox临时文件下载可预测路径名漏洞
2009-09-2300:00:00
Root
www.seebug.org
22
0.0004 Low
EPSS
Percentile
5.1%
CVE ID: CVE-2009-3274
Firefox是一款流行的开源WEB浏览器。
运行在Linux平台上的Firefox对从“下载”窗口所选择的文件使用了可预测的/tmp路径名，本地用户可以在下载之前在/tmp位置放置文件来替换下载文件，之后用户可能受骗打开已被替换了的文件。
Mozilla Firefox 3.6 a1
Mozilla Firefox 3.5.2
厂商补丁：
Mozilla
目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：
Related
openvas
openvas
Insecure Saving Of Downloadable File In Mozilla Firefox (Linux)
2009-09-23 00:00:00
Mozilla Firefox Insecure Saving Of Downloadable File - Linux
2009-09-23 00:00:00
CentOS Security Advisory CESA-2009:1531 (seamonkey)
2009-11-11 00:00:00
cve
cve
CVE-2009-3274
2009-09-21 19:30:00
seebug
seebug
Firefox下载管理器完全可写文件本地权限提升漏洞
2009-11-03 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-53
2009-10-28 00:00:00
Mozilla Firefox / Seamonkey multiple security vulnerabilities
2009-11-05 00:00:00
cvelist
cvelist
CVE-2009-3274
2009-09-21 19:00:00
prion
prion
Design/Logic Flaw
2009-09-21 19:30:00
ubuntucve
ubuntucve
CVE-2009-3274
2009-09-21 00:00:00
mozilla
mozilla
Local downloaded file tampering — Mozilla
2009-10-27 00:00:00
veracode
veracode
Unauthorized Replacement
2020-04-10 00:36:53
nvd
nvd
CVE-2009-3274
2009-09-21 19:30:00
nessus
nessus
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
Fedora 11 : Miro-2.5.2-5.fc11 / blam-1.8.5-15.fc11 / chmsee-1.0.1-12.fc11 / eclipse-3.4.2-17.fc11 / etc (2009-10878)
2009-10-29 00:00:00
Debian DSA-1922-1 : xulrunner - several vulnerabilities
2010-02-24 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2009-10-28 00:00:00
firefox security update
2009-10-28 00:00:00
thunderbird security update
2010-03-17 00:00:00
centos
centos
seamonkey security update
2009-10-28 13:15:48
firefox, nspr security update
2009-10-28 13:44:04
thunderbird security update
2010-03-17 18:24:23
redhat
redhat
(RHSA-2009:1531) Critical: seamonkey security update
2009-10-27 00:00:00
(RHSA-2009:1530) Critical: firefox security update
2009-10-27 00:00:00
(RHSA-2010:0153) Moderate: thunderbird security update
2010-03-17 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: firefox-3.5.4-1.fc11
2009-10-29 02:59:35
[SECURITY] Fedora 11 Update: kazehakase-0.5.8-2.fc11.1
2009-10-29 02:59:35
[SECURITY] Fedora 11 Update: mozvoikko-0.9.7-0.8.rc1.fc11
2009-10-29 02:59:35
debian
debian
[SECURITY] [DSA 1922-1] New xulrunner packages fix several vulnerabilities
2009-10-28 21:13:30
osv
osv
xulrunner - several vulnerabilities
2009-10-28 00:00:00
vmware
vmware
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner regression
2009-11-11 00:00:00
Firefox and Xulrunner vulnerabilities
2009-10-31 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-11-04 14:24:35
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-10-27 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00