Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-develUpgrade seamonkeyUpgrade xulrunner-develUpgrade seamonkey-js-debuggerUpgrade xulrunnerUpgrade xulrunner-devel-unstableUpgrade firefoxUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade seamonkey-chat | Dec 1, 2016 | Dec 17, 2009 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade thunderbirdUpgrade seamonkey | Dec 10, 2025 | Dec 16, 2009 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade www-client/icecat.Upgrade mail-client/thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin. | Oct 30, 2017 | Dec 17, 2009 |
| Mfsa2009 69 | — | Upgrade to Mozilla Firefox version 3.5.6Upgrade to Mozilla Firefox version 3.0.16 | Jun 14, 2012 | Dec 17, 2009 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.1 | Feb 3, 2012 | Dec 17, 2009 |
| Oracle_linux | — | Upgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunnerUpgrade firefox | Oct 16, 2024 | Dec 17, 2009 |
| Suse | — | Upgrade mozilla-xulrunner190-translationsUpgrade gconf2-x86Upgrade orbit2-x86Upgrade libfreebl3Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefox-translations-otherUpgrade libfreebl3-32bitUpgrade libidl-x86Upgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner192-x86Upgrade libfreebl3-x86Upgrade gconf2Upgrade mozilla-nss-32bitUpgrade orbit2-32bitUpgrade mozilla-nssUpgrade gconf2-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-translationsUpgrade mozilla-nspr-x86Upgrade orbit2Upgrade mozilla-xulrunner190Upgrade mozilla-nsprUpgrade mozilla-xulrunner192-translationsUpgrade MozillaFirefoxUpgrade mozilla-xulrunner191Upgrade libidl-32bitUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner191-gnomevfsUpgrade libidl | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade xulrunner-1.9Upgrade firefox-3.5Upgrade abrowserUpgrade xulrunner-1.9.1 | Nov 8, 2024 | Dec 17, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub