CVE-2008-2933: Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line U...

Security readout for executives and security teams

This is an old Firefox URI handling flaw. Vulnerable Firefox versions could treat pipe characters in a command-line URI as multiple tabs. A malicious interaction could make Firefox open privileged chrome URIs or read local files. Exposure is mainly legacy systems still running Firefox before 2.0.0.16 or 3.0.1. Current exposure should be limited to unsupported legacy desktops, embedded systems, virtual images, or long-lived Linux distributions carrying old Firefox builds. The provided affected-product metadata is incomplete, so inventory should validate actual Firefox package versions rather than relying on the n/a CPE data. Treat this as a legacy exposure cleanup item, not a modern emergency unless old Firefox builds are still present. If vulnerable browsers exist in production, prioritize replacement because the issue can expose local files and relies on obsolete software with broader security risk. Mitigation focus: Upgrade Firefox to 2.0.0.16, 3.0.1, or a vendor-fixed later package.; Apply relevant distribution advisories for Debian, Red Hat, Gentoo, Ubuntu, Novell, or rPath systems.; Remove unsupported Firefox 2.x and early 3.x installations from managed endpoints..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.