File Exposure Vulnerability in Mozilla and Firefox Products
CVE-2004-1449
Currently unrated
What is CVE-2004-1449?
A vulnerability in Mozilla products prior to version 1.7, including Firefox before version 0.9 and Thunderbird before version 0.7, allows remote attackers to expose sensitive information on a user's system. By obscuring a file upload control, attackers can trick users into dragging text, inadvertently revealing local file paths. This could lead to further exploitation, as attackers gain insights into the structure and contents of a user’s file system, creating potential pathways for data breaches and unauthorized access.