CVE-2005-0142 Information disclosure in n/a
Local attackers can read sensitive web content or attachments saved by other users due to world-readable temporary file permissions in Firefox and Thunderbird.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-0142?
CVE-2005-0142 is a low-severity vulnerability in Mozilla Firefox, published on 29 Jan 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.
Which versions are affected by CVE-2005-0142?
It affects 3 products.
Products include Mozilla Firefox, Mozilla Mozilla, Mozilla Thunderbird.
How do I fix CVE-2005-0142?
Upgrade to a fixed version.
Is CVE-2005-0142 being exploited?
There is no known exploitation of CVE-2005-0142 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-q449-wmj9-fjj4.