The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and the history.back and history.forward JavaScript functions.
CVSS Details
- CVSS 3.1 Base Score: 3.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkeyUpgrade seamonkey-chatUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkey-mailUpgrade seamonkey-nssUpgrade seamonkey-nspr-develUpgrade seamonkey-nsprUpgrade xulrunner-develUpgrade xulrunnerUpgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade seamonkey-js-debugger | Dec 1, 2016 | Jul 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-firefox-develUpgrade thunderbirdUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox. | Oct 30, 2017 | Jul 30, 2010 |
| Mfsa2010 45 | — | Upgrade to Mozilla Firefox version 3.5.11Upgrade to Mozilla Firefox version 3.6.7 | Jun 14, 2012 | Jul 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jul 30, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Jul 30, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 20, 2010 |
| Suse | — | Upgrade gconf2-32bitUpgrade MozillaFirefox-translations-otherUpgrade orbit2-x86Upgrade libidlUpgrade libidl-x86Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefoxUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-x86Upgrade gconf2Upgrade orbit2-32bitUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-nss-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-32bitUpgrade orbit2Upgrade mozilla-xulrunner191-gnomevfsUpgrade libfreebl3-x86Upgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-xulrunner192-32bitUpgrade libidl-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade gconf2-x86Upgrade MozillaFirefox-translationsUpgrade libfreebl3-32bitUpgrade mozilla-nsprUpgrade mozilla-nssUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-nspr-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9.2Upgrade firefox-3.0Upgrade firefox-3.5Upgrade firefox | Nov 8, 2024 | Jul 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub