Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade firefoxUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chatUpgrade xulrunnerUpgrade seamonkey-js-debuggerUpgrade xulrunner-develUpgrade seamonkey-nss-develUpgrade xulrunner-devel-unstableUpgrade seamonkey-mailUpgrade seamonkey-nssUpgrade seamonkey-develUpgrade seamonkey-nspr-develUpgrade seamonkey-nspr | Dec 1, 2016 | Jun 12, 2009 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Jun 12, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Jun 12, 2009 |
| Mfsa2009 26 | — | Upgrade to Mozilla Firefox version 3.0.11 | Jun 14, 2012 | Jun 12, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.17 | Feb 3, 2012 | Jun 12, 2009 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Jun 12, 2009 |
| Suse | — | Upgrade libidl-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-nssUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefoxUpgrade mozilla-nspr-x86Upgrade libfreebl3-x86Upgrade orbit2-x86Upgrade mozilla-xulrunner192Upgrade gconf2-x86Upgrade mozilla-nss-toolsUpgrade libfreebl3Upgrade gconf2-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-x86Upgrade orbit2Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191Upgrade gconf2Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nsprUpgrade orbit2-32bitUpgrade libidl-x86Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade libidlUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Jun 12, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub