CVE-2007-3073

Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix...

7.8 High

Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary files via ..%2F (dot dot encoded slash) sequences in a resource:// URI.

Exploit likelihood

1.69%Up 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2007-3073
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:C/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-3073
Updated: 2026-11-02

EUVDEUVD-2007-3065 No score

Record: EUVD-2007-3065
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c6fg-jhfr-pxqg No score

Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix...

Record: GHSA-c6fg-jhfr-pxqg
Updated: 2026-11-02

Affected products

mozilla firefox

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases, references, title	GitHub Advisories
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3073 is a high vulnerability (CVSS 7.8) in Mozilla Firefox, published June 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.69%, the 77th percentile. No source names a fixed version.

References

Show 4 moreShow less