Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nss-toolsUpgrade nss-develUpgrade seamonkey-dom-inspectorUpgrade nss-pkcs11-develUpgrade seamonkey-develUpgrade seamonkey-nsprUpgrade nssUpgrade nsprUpgrade seamonkey-chatUpgrade thunderbirdUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade seamonkey-nssUpgrade xulrunner-develUpgrade firefoxUpgrade seamonkey-nspr-develUpgrade seamonkeyUpgrade seamonkey-mailUpgrade seamonkey-js-debuggerUpgrade nspr-develUpgrade seamonkey-nss-devel | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkey | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 69 | — | Upgrade to Mozilla Firefox version 2.0.0.19Upgrade to Mozilla Firefox version 3.0.5 | Jun 14, 2012 | Dec 17, 2008 |
| Oracle_linux | — | Upgrade nsprUpgrade nss-toolsUpgrade xulrunnerUpgrade nssUpgrade firefoxUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade xulrunner-devel-unstableUpgrade xulrunner-devel | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefoxUpgrade abrowser | Nov 8, 2024 | Dec 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub