CVE-2006-1729: Canonical Ubuntu Linux

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.

Affected products

• Canonical Ubuntu Linux: version 4.10 only; version 5.04 only; version 5.10 only
• Mozilla Firefox: from 1.0, before 1.0.8 (fixed in 1.0.8); from 1.5, before 1.5.0.2 (fixed in 1.5.0.2)
• Mozilla Mozilla Suite: before 1.7.13 (fixed in 1.7.13)
• Mozilla Seamonkey: before 1.0.1 (fixed in 1.0.1)

Published 2006-04-14. Last modified 2026-06-16.