Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nspr-develUpgrade seamonkey-mailUpgrade seamonkey-nss-develUpgrade firefoxUpgrade seamonkeyUpgrade nss-toolsUpgrade seamonkey-develUpgrade seamonkey-nssUpgrade seamonkey-nsprUpgrade seamonkey-dom-inspectorUpgrade nssUpgrade seamonkey-chatUpgrade nss-develUpgrade seamonkey-js-debugger | Dec 1, 2016 | Feb 4, 2009 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefox-develUpgrade linux-firefoxUpgrade linux-seamonkey-develUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Feb 11, 2009 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Feb 4, 2009 |
| Mfsa2009 05 | — | Upgrade to Mozilla Firefox version 3.0.6 | Jun 14, 2012 | Feb 4, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.15 | Feb 3, 2012 | Feb 4, 2009 |
| Oracle_linux | — | Upgrade nss-develUpgrade xulrunner-devel-unstableUpgrade nssUpgrade xulrunner-develUpgrade nss-toolsUpgrade firefoxUpgrade nss-pkcs11-develUpgrade xulrunner | Oct 16, 2024 | Feb 4, 2009 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190Upgrade MozillaFirefoxUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade firefoxUpgrade firefox-3.0Upgrade xulrunner-1.9 | Nov 8, 2024 | Feb 4, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub