← Database

CVE-2004-1449

LOW CVSS: 2.6 Published: 2004-12-31 Modified: 2026-06-16

Description

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.

Affected Platforms

Mozilla ThunderbirdMozilla MozillaFirebirdsql Firebird

Weakness Type

NVD-CWE-Other

References