Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner | Dec 1, 2016 | Feb 18, 2010 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade www-client/mozilla-firefox-bin.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/icecat. | Oct 30, 2017 | Feb 18, 2010 |
| Mfsa2010 46 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Feb 18, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Feb 18, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.1Upgrade to Mozilla Thunderbird version 3.0.6 | Feb 22, 2012 | Feb 18, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Feb 18, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-translationsUpgrade orbit2-32bitUpgrade mozilla-nsprUpgrade libfreebl3Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner192-develUpgrade MozillaThunderbirdUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade mozilla-nssUpgrade orbit2-x86Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-gnomeUpgrade gconf2-32bitUpgrade mozilla-xulrunner191-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade libfreebl3-x86Upgrade MozillaFirefox-translationsUpgrade libidl-32bitUpgrade mozilla-xulrunner192-x86Upgrade libidl-x86Upgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-32bitUpgrade gconf2Upgrade MozillaThunderbird-translations-commonUpgrade libidlUpgrade mozilla-xulrunner192-gnome-32bitUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner191Upgrade mozilla-xulrunner192-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner190Upgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefoxUpgrade mozilla-xulrunner190-x86Upgrade orbit2Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-tools | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.5Upgrade firefoxUpgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefox-3.0Upgrade abrowser | Nov 8, 2024 | Feb 18, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub