Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Dec 1, 2016 | Feb 18, 2010 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade thunderbirdUpgrade firefoxUpgrade linux-firefox-devel | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Feb 18, 2010 |
| Mfsa2010 46 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Feb 18, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Feb 18, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.6Upgrade to Mozilla Thunderbird version 3.1.1 | Feb 22, 2012 | Feb 18, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunnerUpgrade xulrunner-devel | Oct 16, 2024 | Feb 18, 2010 |
| Suse | — | Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-develUpgrade libfreebl3-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-32bitUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner190-x86Upgrade gconf2Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-32bitUpgrade orbit2Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-x86Upgrade libidlUpgrade MozillaFirefox-develUpgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade MozillaThunderbirdUpgrade MozillaFirefox-translationsUpgrade libidl-32bitUpgrade mozilla-xulrunner192-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-develUpgrade orbit2-32bitUpgrade libfreebl3Upgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nsprUpgrade libfreebl3-x86Upgrade mozilla-xulrunner191-translationsUpgrade orbit2-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade libidl-x86Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner190-gnomevfsUpgrade gconf2-32bitUpgrade mozilla-nss | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade abrowserUpgrade firefoxUpgrade xulrunner-1.9.2Upgrade firefox-3.5Upgrade thunderbird | Nov 8, 2024 | Feb 18, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub