Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nssUpgrade nss-develUpgrade firefoxUpgrade nss-tools | Dec 1, 2016 | Feb 4, 2009 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-firefox-develUpgrade linux-seamonkey-develUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Feb 11, 2009 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Feb 4, 2009 |
| Mfsa2009 06 | — | Upgrade to Mozilla Firefox version 3.0.6 | Jun 14, 2012 | Feb 4, 2009 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nssUpgrade firefoxUpgrade nss-tools | Oct 16, 2024 | Feb 4, 2009 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190Upgrade MozillaFirefoxUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefox-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade abrowserUpgrade xulrunner-1.9 | Nov 8, 2024 | Feb 4, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub