CVE-2008-2805: Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of a...

Security readout for executives and security teams

This is an old Mozilla browser flaw that could let a malicious website force an affected user's browser to upload local files from their computer. Business risk is mainly confidentiality loss on systems still running Firefox before 2.0.0.15 or SeaMonkey before 1.1.10. Modern environments are unlikely to run these versions, but exposure is plausible on legacy workstations, embedded admin stations, old Linux distributions, kiosks, or preserved application stacks using obsolete Mozilla browsers. Prioritize if any legacy browser use remains in the estate. For most modern fleets, this is a legacy hygiene issue rather than an emergency, because affected versions are from 2008 and active exploitation is not evidenced here. Mitigation focus: Upgrade Firefox to 2.0.0.15 or later where applicable.; Upgrade SeaMonkey to 1.1.10 or later where applicable.; Apply relevant vendor packages from affected Linux distribution advisories..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.