Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2008-7292

Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

  • Published: Aug 9, 2011
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-7292
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
mozilla / bugzilla 2.20 2.20.x
mozilla / bugzilla 2.20.1 2.20.1.x
mozilla / bugzilla 2.20.2 2.20.2.x
mozilla / bugzilla 2.20.3 2.20.3.x
mozilla / bugzilla 2.20.4 2.20.4.x
mozilla / bugzilla 2.22 2.22.x
mozilla / bugzilla 2.22.1 2.22.1.x
mozilla / bugzilla 2.22.2 2.22.2.x
mozilla / bugzilla 3.0 3.0.x
mozilla / bugzilla 3.0.0 3.0.0.x
mozilla / bugzilla 3.0.1 3.0.1.x
mozilla / bugzilla 3.0.2 3.0.2.x