Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | May 31, 2007 |
| Mfsa2007 14 | — | Upgrade to Mozilla Firefox version 2.0.0.4Upgrade to Mozilla Firefox version 1.5.0.12 | Jun 14, 2012 | May 31, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.9Upgrade to Mozilla SeaMonkey version 1.1.2 | Feb 3, 2012 | May 31, 2007 |
| Oracle_linux | — | Upgrade firefoxUpgrade yelpUpgrade devhelpUpgrade devhelp-develUpgrade firefox-devel | Oct 16, 2024 | Jun 1, 2007 |
| Suse | — | Upgrade mozilla-ircUpgrade mozilla-deatUpgrade mozilla-csUpgrade mozilla-mailUpgrade seamonkey-spellcheckerUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbird-translationsUpgrade seamonkey-ircUpgrade mozilla-develUpgrade mozilla-huUpgrade MozillaFirefoxUpgrade suse-releaseUpgrade mozilla-venkmanUpgrade seamonkey-mailUpgrade seamonkeyUpgrade seamonkey-venkmanUpgrade MozillaThunderbirdUpgrade mozillaUpgrade seamonkey-dom-inspectorUpgrade mozilla-dom-inspectorUpgrade mozilla-calendar | Feb 17, 2015 | May 31, 2007 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Jun 1, 2007 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub