Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-thunderbirdUpgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade linux-firefoxUpgrade linux-seamonkey | Dec 10, 2025 | Feb 1, 2012 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/icecat.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Feb 1, 2012 |
| Mfsa2012 09 | — | Upgrade to Mozilla Firefox version 10.0Upgrade to the latest version of Mozilla Firefox | Jun 14, 2012 | Feb 1, 2012 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.7.0 | Feb 3, 2012 | Feb 1, 2012 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox | Feb 17, 2015 | Feb 1, 2012 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub