Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nssUpgrade nss-toolsUpgrade nss-develUpgrade firefox | Dec 1, 2016 | Feb 4, 2009 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-firefox-develUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-seamonkey-develUpgrade linux-thunderbirdUpgrade linux-firefox | Dec 10, 2025 | Feb 11, 2009 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Feb 4, 2009 |
| Mfsa2009 06 | — | Upgrade to Mozilla Firefox version 3.0.6 | Jun 14, 2012 | Feb 4, 2009 |
| Oracle_linux | — | Upgrade nss-develUpgrade nss-pkcs11-develUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade nss-toolsUpgrade firefoxUpgrade nss | Oct 16, 2024 | Feb 4, 2009 |
| Suse | — | Upgrade mozilla-xulrunner190-32bitUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade abrowser | Nov 8, 2024 | Feb 4, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub