Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install TLS client certificates with minimal user interaction, and automatically sends these certificates when requested, which makes it easier for remote web sites to track user activities across domains by requesting the TLS client certificates from other domains.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade flockUpgrade linux-flockUpgrade linux-firefox-develUpgrade linux-seamonkey-devel | Dec 10, 2025 | Mar 30, 2008 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Sep 13, 2007 |
| Mfsa2008 17 | — | Upgrade to Mozilla Firefox version 2.0.0.13 | Jun 14, 2012 | Sep 13, 2007 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.9 | Feb 3, 2012 | Sep 13, 2007 |
| Suse | — | Upgrade mozilla-develUpgrade mozilla-xulrunner181-32bitUpgrade mozilla-ircUpgrade mozilla-huUpgrade seamonkey-mailUpgrade mozilla-xulrunner181Upgrade seamonkey-spellcheckerUpgrade seamonkey-ircUpgrade mozilla-csUpgrade seamonkey-venkmanUpgrade mozilla-mailUpgrade suse-releaseUpgrade mozillaUpgrade MozillaFirefox-translationsUpgrade epiphany-extensionsUpgrade epiphany-docUpgrade mozilla-dom-inspectorUpgrade mozilla-venkmanUpgrade seamonkeyUpgrade seamonkey-dom-inspectorUpgrade mozilla-deatUpgrade mozilla-xulrunner181-develUpgrade mozilla-xulrunner181-l10nUpgrade MozillaFirefoxUpgrade epiphanyUpgrade mozilla-calendarUpgrade mozilla-xulrunner181-64bitUpgrade epiphany-devel | Feb 17, 2015 | Sep 13, 2007 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Sep 13, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub