Mozilla · Firefox · CVE-2008-2805
**Name of the Vulnerable Software and Affected Versions**
Mozilla Firefox versions prior to 2.0.0.15
SeaMonkey versions prior to 1.1.10
**Description**
The issue allows remote attackers to force the upload of arbitrary local files from a client computer. This is achieved through vectors involving `originalTarget` and DOM Range.
**Recommendations**
For Mozilla Firefox versions prior to 2.0.0.15, update to version 2.0.0.15 or later.
For SeaMonkey versions prior to 1.1.10, update to version 1.1.10 or later.