CVEs-PoC/2007/CVE-2007-3073.md

CVE-2007-3073

Description

Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary files via ..%2F (dot dot encoded slash) sequences in a resource:// URI.

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=367428
• https://bugzilla.mozilla.org/show_bug.cgi?id=367428

Github

No PoCs found on GitHub currently.