The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nssUpgrade seamonkey-nspr-develUpgrade xulrunner-develUpgrade xulrunnerUpgrade seamonkey-chatUpgrade seamonkey-nsprUpgrade seamonkey-nssUpgrade seamonkey-mailUpgrade nss-toolsUpgrade seamonkey-develUpgrade seamonkeyUpgrade firefoxUpgrade devhelp-develUpgrade xulrunner-devel-unstableUpgrade devhelpUpgrade yelpUpgrade nss-pkcs11-develUpgrade seamonkey-nss-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-dom-inspectorUpgrade nss-devel | Dec 1, 2016 | Nov 13, 2008 |
| Freebsd | — | Upgrade seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Nov 13, 2008 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/icecat.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/seamonkey-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner. | Oct 30, 2017 | Nov 13, 2008 |
| Mfsa2008 53 | — | Upgrade to Mozilla Firefox version 2.0.0.18Upgrade to Mozilla Firefox version 3.0.4 | Jun 14, 2012 | Nov 13, 2008 |
| Oracle_linux | — | Upgrade nssUpgrade devhelp-develUpgrade xulrunner-develUpgrade xulrunnerUpgrade nss-pkcs11-develUpgrade nss-develUpgrade firefoxUpgrade xulrunner-devel-unstableUpgrade yelpUpgrade nss-toolsUpgrade devhelp | Oct 16, 2024 | Nov 13, 2008 |
| Suse | — | Upgrade suse-releaseUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-translations-64bitUpgrade mozilla-xulrunner190-develUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-translations-32bitUpgrade mozilla-xulrunner190-64bitUpgrade MozillaThunderbird-translationsUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox | Feb 17, 2015 | Nov 13, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefoxUpgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Nov 13, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub