Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Feb 18, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade firefoxUpgrade linux-firefox-develUpgrade thunderbird | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/firefox.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Feb 18, 2010 |
| Mfsa2010 46 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Feb 18, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Feb 18, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.6Upgrade to Mozilla Thunderbird version 3.1.1 | Feb 22, 2012 | Feb 18, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Feb 18, 2010 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner192-x86Upgrade libfreebl3-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192Upgrade mozilla-nsprUpgrade mozilla-xulrunner191-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade orbit2-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade libidl-x86Upgrade orbit2-32bitUpgrade libfreebl3Upgrade gconf2-x86Upgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192-gnomeUpgrade gconf2-32bitUpgrade libidl-32bitUpgrade mozilla-xulrunner191-32bitUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190Upgrade gconf2Upgrade mozilla-nss-x86Upgrade MozillaThunderbird-develUpgrade libidlUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-x86Upgrade MozillaFirefox-translations-otherUpgrade orbit2Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner191Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-32bitUpgrade mozilla-nss-toolsUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner192-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade firefox-3.5Upgrade thunderbirdUpgrade firefoxUpgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Feb 18, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub