Vulnerability Database

299,879

Total vulnerabilities in the database

CVE-2008-7292

Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

  • Published: Aug 9, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2008-7292
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
mozilla / bugzilla 2.20 2.20.x
mozilla / bugzilla 2.20.1 2.20.1.x
mozilla / bugzilla 2.20.2 2.20.2.x
mozilla / bugzilla 2.20.3 2.20.3.x
mozilla / bugzilla 2.20.4 2.20.4.x
mozilla / bugzilla 2.22 2.22.x
mozilla / bugzilla 2.22.1 2.22.1.x
mozilla / bugzilla 2.22.2 2.22.2.x
mozilla / bugzilla 3.0 3.0.x
mozilla / bugzilla 3.0.0 3.0.0.x
mozilla / bugzilla 3.0.1 3.0.1.x
mozilla / bugzilla 3.0.2 3.0.2.x