Total vulnerabilities in the database
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab.
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox | 0.8 | 0.8.x |
| mozilla / mozilla | 1.7 | 1.7.x |
| mozilla / firefox | 0.9.1 | 0.9.1.x |
| mozilla / firefox | 0.9 | 0.9.x |
| mozilla / mozilla | 1.7.1 | 1.7.1.x |
| mozilla / firefox | 0.9.3 | 0.9.3.x |
| mozilla / firefox | 0.9.2 | 0.9.2.x |
| mozilla / mozilla | 1.7.2 | 1.7.2.x |
| mozilla / mozilla | 1.7-rc3 | 1.7-rc3.x |
| mozilla / mozilla | 1.7.3 | 1.7.3.x |