{"schemaVersion":3,"id":"CVE-2006-1729","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.","dates":{"published":"2006-04-14T10:00:00.000Z","modified":"2024-08-07T17:19:49.494Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02234,"percentile":0.82522,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02234},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02234,"percentile":0.82522}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02234,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02234,"percentile":0.82522}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"4.10","noFixRecorded":false,"fixedIn":null},{"text":"5.04","noFixRecorded":false,"fixedIn":null},{"text":"5.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.10 | 5.04 | 5.10","eol":{"isEol":true,"eolDate":"2006-04-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"4.10","label":"4.10 'Warty Warthog'","eolFrom":"2006-04-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"4.10"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"mozilla","product":"firefox","name":"Firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0, < 1.0.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.5, < 1.5.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0, < 1.0.8 | ≥ 1.5, < 1.5.0.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"mozilla_suite","name":"mozilla suite","label":"mozilla_suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.7.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.13","eol":null,"hubHref":"/vendor/mozilla/mozilla_suite"},{"vendor":"mozilla","product":"seamonkey","name":"seamonkey","label":"seamonkey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1","eol":null,"hubHref":"/vendor/mozilla/seamonkey"}],"affectedCount":4,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://usn.ubuntu.com/275-1/","label":"usn.ubuntu.com/275-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3748","label":"www.vupen.com/english/advisories/2006/3748","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Permissions Required","Third Party Advisory"]},{"url":"http://secunia.com/advisories/19902","label":"secunia.com/advisories/19902","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19941","label":"secunia.com/advisories/19941","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0328.html","label":"www.redhat.com/support/errata/RHSA-2006-0328.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml","label":"www.gentoo.org/security/en/glsa/glsa-200604-12.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://secunia.com/advisories/21622","label":"secunia.com/advisories/21622","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19862","label":"secunia.com/advisories/19862","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:075","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:075","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm","label":"support.avaya.com/elmodocs2/security/ASA-2006-205.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1051","label":"www.debian.org/security/2006/dsa-1051","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html","label":"www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/271-1/","label":"usn.ubuntu.com/271-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://secunia.com/advisories/19714","label":"secunia.com/advisories/19714","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0329.html","label":"www.redhat.com/support/errata/RHSA-2006-0329.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1929","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1929","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml","label":"www.gentoo.org/security/en/glsa/glsa-200604-18.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://secunia.com/advisories/19811","label":"secunia.com/advisories/19811","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10922","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10922","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://secunia.com/advisories/19794","label":"secunia.com/advisories/19794","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19746","label":"secunia.com/advisories/19746","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/21033","label":"secunia.com/advisories/21033","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/0083","label":"www.vupen.com/english/advisories/2008/0083","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Permissions Required","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://secunia.com/advisories/19696","label":"secunia.com/advisories/19696","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19759","label":"secunia.com/advisories/19759","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html","label":"lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html","hostname":"lists.suse.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/436338/100/0/threaded","label":"www.securityfocus.com/archive/1/436338/100/0/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://www.securityfocus.com/archive/1/446658/100/200/threaded","label":"www.securityfocus.com/archive/1/446658/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://www.vupen.com/english/advisories/2006/1356","label":"www.vupen.com/english/advisories/2006/1356","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25823","label":"exchange.xforce.ibmcloud.com/vulnerabilities/25823","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://secunia.com/advisories/19729","label":"secunia.com/advisories/19729","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19649","label":"secunia.com/advisories/19649","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19863","label":"secunia.com/advisories/19863","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/436296/100/0/threaded","label":"www.securityfocus.com/archive/1/436296/100/0/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://www.securityfocus.com/bid/17516","label":"www.securityfocus.com/bid/17516","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html","label":"www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA","Third Party Advisory"]},{"url":"http://secunia.com/advisories/19852","label":"secunia.com/advisories/19852","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19721","label":"secunia.com/advisories/19721","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/22066","label":"secunia.com/advisories/22066","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.novell.com/linux/security/advisories/2006_35_mozilla.html","label":"www.novell.com/linux/security/advisories/2006_35_mozilla.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3391","label":"www.vupen.com/english/advisories/2006/3391","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Permissions Required","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-23.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-23.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19631","label":"secunia.com/advisories/19631","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:076","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:076","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1046","label":"www.debian.org/security/2006/dsa-1046","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1044","label":"www.debian.org/security/2006/dsa-1044","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1044-1","DSA-1046-1","DSA-1051-1","DSA-1134-1","RHSA-2006:0328","RHSA-2006:0329"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-04-14T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T17:19:49.494Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:49:03.693Z","stale":false,"partial":false}}