Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:3.6:a1:*:*:*:*:*:*

part: a version: 3.6 update: a1

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.905962
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.905963
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.905964
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.905966

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3274 vulnerable 2026-06-03 14:29:45.818116 Details available
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.
Published: 2009-09-21T19:00:00.000Z
Updated: 2024-08-07T06:22:24.205Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.