CVE-2011-0071: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 on Windows allows remote attackers to determine the existence of arbitrary files, and possibly load resources, via vectors involving a resource: URL.

Affected products

• Mozilla Firefox: version 3.6 only; version 3.6.2 only; version 3.6.3 only; version 3.6.4 only; version 3.6.6 only; version 3.6.7 only; …
• Mozilla Seamonkey: up to and including 2.0.13; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …
• Mozilla Thunderbird: up to and including 3.1.9; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2011-05-07. Last modified 2026-06-16.