Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | May 31, 2007 |
| Mfsa2007 14 | — | Upgrade to Mozilla Firefox version 1.5.0.12Upgrade to Mozilla Firefox version 2.0.0.4 | Jun 14, 2012 | May 31, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.9Upgrade to Mozilla SeaMonkey version 1.1.2 | Feb 3, 2012 | May 31, 2007 |
| Oracle_linux | — | Upgrade devhelpUpgrade yelpUpgrade firefoxUpgrade devhelp-develUpgrade firefox-devel | Oct 16, 2024 | Jun 1, 2007 |
| Suse | — | Upgrade mozilla-ircUpgrade mozilla-csUpgrade MozillaFirefox-translationsUpgrade suse-releaseUpgrade mozilla-venkmanUpgrade seamonkey-ircUpgrade mozilla-deatUpgrade mozilla-huUpgrade mozilla-develUpgrade seamonkey-spellcheckerUpgrade mozilla-mailUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translationsUpgrade mozilla-dom-inspectorUpgrade seamonkey-mailUpgrade mozillaUpgrade seamonkey-dom-inspectorUpgrade seamonkey-venkmanUpgrade MozillaThunderbirdUpgrade seamonkeyUpgrade mozilla-calendar | Feb 17, 2015 | May 31, 2007 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jun 1, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub