File Access Vulnerability in Mozilla Products by Mozilla

CVE-2006-1729

Summary

Mozilla Firefox and its related products have a vulnerability that allows remote attackers to read arbitrary files on the user's system. This can be exploited by manipulating input controls, either by inserting the target filename into a text box converted to a file upload control or by changing the input control type tied to an event handler. Users of affected versions are at risk of unauthorized access to sensitive files, making it essential to apply security patches and updates provided by the vendor.

References