Vulnerability in Firebirdsql Firebird

CVE-2004-1449

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.

EPSS: 0.009 (56.8th percentile) — read the EPSS interpretation.

Affected products

Firebirdsql Firebird — versions 0.7
Mozilla — versions 0.8, 0.9.2, 0.9.2.1
Mozilla Thunderbird — versions 0.1, 0.2, 0.3
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
cve@mitre.org (x_refsource_CONFIRM)