Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0 | 4.0 |
Firefox | Mozilla | 4.0.1 | 4.0.1 |
Firefox | Mozilla | 5.0 | 5.0 |
Firefox | Mozilla | 5.0.1 | 5.0.1 |
Firefox | Mozilla | 6.0 | 6.0 |
Firefox | Mozilla | 6.0.1 | 6.0.1 |
Firefox | Mozilla | 6.0.2 | 6.0.2 |
Firefox | Mozilla | 7.0 | 7.0 |
Firefox | Mozilla | 8.0 | 8.0 |
Firefox | Mozilla | 8.0.1 | 8.0.1 |
Firefox | Mozilla | 9.0 | 9.0 |