Lack of data validation In nss
Description
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:1.9.0.6-1.el5 | ||
rpm rhel5 | 0:3.0.6-1.el5 | ||
rpm rhel5 | 0:3.12.2.0-4.el5 | ||
rpm rhel5 | 0:2.0.0.21-1.el5 |
Aliases
1. 2. 3.