CVE-2005-0142 Information disclosure in n/a

Low 2.1 Published Updated

Local attackers can read sensitive web content or attachments saved by other users due to world-readable temporary file permissions in Firefox and Thunderbird.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2005-0142?

CVE-2005-0142 is a low-severity vulnerability in Mozilla Firefox, published on 29 Jan 2005. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.

Which versions are affected by CVE-2005-0142?

It affects 3 products.

Products include Mozilla Firefox, Mozilla Mozilla, Mozilla Thunderbird.

How do I fix CVE-2005-0142?

Upgrade to a fixed version.

Is CVE-2005-0142 being exploited?

There is no known exploitation of CVE-2005-0142 in the wild and no public exploit code.

All Mozilla Firefox vulnerabilities

Sources

Also known as GHSA-q449-wmj9-fjj4.

Is CVE-2005-0142 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free