Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade seamonkey-chatUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade seamonkey-nssUpgrade seamonkey-js-debuggerUpgrade seamonkey-nsprUpgrade seamonkey-nss-develUpgrade xulrunnerUpgrade seamonkey-develUpgrade seamonkey-nspr-develUpgrade seamonkey-mail | Dec 1, 2016 | Jun 12, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade linux-firefox-develUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Jun 12, 2009 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey. | Oct 30, 2017 | Jun 12, 2009 |
| Mfsa2009 26 | — | Upgrade to Mozilla Firefox version 3.0.11 | Jun 14, 2012 | Jun 12, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.17 | Feb 3, 2012 | Jun 12, 2009 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jun 12, 2009 |
| Suse | — | Upgrade mozilla-nspr-x86Upgrade orbit2-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-translationsUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190Upgrade gconf2-x86Upgrade MozillaFirefox-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nssUpgrade libidl-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade gconf2Upgrade mozilla-nsprUpgrade libidl-x86Upgrade mozilla-xulrunner191Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade libidlUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-x86Upgrade orbit2Upgrade mozilla-nss-x86Upgrade libfreebl3Upgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nss-toolsUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-x86Upgrade orbit2-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade xulrunner-1.9Upgrade firefox-3.0 | Nov 8, 2024 | Jun 12, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub