Information disclosure in Microsoft Windows
CVE-2008-7292
Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.
Vulnerability class: Information Disclosure
EPSS: 0.004 (31.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows
- Mozilla Bugzilla — versions 2.20, 2.20.1, 2.20.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch)
- cve@mitre.org (x_refsource_CONFIRM, Patch)