VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 9, 2011· Updated Jun 16, 2026

CVE-2008-7292

CVE-2008-7292

Description

Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Mozilla Corporation/Bugzilla12 versions
    cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*
  • Python Bugzilla Project/Bugzillallm-create
    Range: <2.20.5, <2.22.3, <3.0.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.