Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefoxUpgrade linux-mozillaUpgrade mozilla-gtk1Upgrade linux-mozilla-develUpgrade mozilla | Dec 10, 2025 | Jul 30, 2004 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-bin.Upgrade www-client/epiphany.Upgrade www-client/mozilla.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/galeon. | Oct 30, 2017 | Aug 18, 2004 |
| Suse | — | Upgrade mozilla-venkmanUpgrade mozilla-ircUpgrade mozilla-mailUpgrade mozillaUpgrade mozilla-calendarUpgrade mozilla-dom-inspector | Feb 17, 2015 | Aug 18, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub