Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunnerUpgrade nss-toolsUpgrade seamonkey-chatUpgrade nssUpgrade seamonkey-nspr-develUpgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade nss-develUpgrade xulrunner-devel-unstableUpgrade seamonkey-nsprUpgrade seamonkey-nssUpgrade firefoxUpgrade seamonkey-mailUpgrade nss-pkcs11-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-js-debuggerUpgrade nspr-develUpgrade thunderbirdUpgrade seamonkeyUpgrade nsprUpgrade xulrunner-devel | Dec 1, 2016 | Dec 17, 2008 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade linux-firefoxUpgrade linux-thunderbird | Dec 10, 2025 | Dec 19, 2008 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade dev-libs/nss.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Dec 17, 2008 |
| Mfsa2008 64 | — | Upgrade to Mozilla Firefox version 2.0.0.19Upgrade to Mozilla Firefox version 3.0.5 | Jun 14, 2012 | Dec 17, 2008 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.14 | Feb 3, 2012 | Dec 17, 2008 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 2.0.0.19 | Feb 22, 2012 | Dec 17, 2008 |
| Oracle_linux | — | Upgrade firefoxUpgrade nss-develUpgrade nspr-develUpgrade nsprUpgrade nss-toolsUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade nss-pkcs11-develUpgrade xulrunnerUpgrade nss | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade python-xpcom190Upgrade MozillaThunderbird-develUpgrade MozillaThunderbird-translationsUpgrade mozilla-develUpgrade mozilla-mailUpgrade mozilla-xulrunner181Upgrade mozilla-xulrunner181-l10n-32bitUpgrade mozilla-ircUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-huUpgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-spellcheckerUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner190-translations-64bitUpgrade seamonkey-mailUpgrade mozilla-csUpgrade mozilla-xulrunner181-32bitUpgrade seamonkey-ircUpgrade epiphanyUpgrade mozilla-xulrunner181-64bitUpgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-deatUpgrade MozillaThunderbirdUpgrade mozilla-xulrunner190-64bitUpgrade mozilla-calendarUpgrade seamonkey-dom-inspectorUpgrade mozilla-dom-inspectorUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner181-l10nUpgrade mozilla-xulrunner181-develUpgrade mozilla-venkmanUpgrade seamonkeyUpgrade gecko-sdkUpgrade mozillaUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-devel | Feb 17, 2015 | Dec 17, 2008 |
| Ubuntu | — | Upgrade xulrunner-1.9Upgrade firefoxUpgrade thunderbirdUpgrade mozilla-thunderbirdUpgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Dec 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub