CVE-2009-0357
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web...
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
Exploit likelihood
What each source reports
NVD Score used
5.0
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
- Record
CVE-2009-0357- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
- Record
CVE-2009-0357- Updated
- 2026-11-02
EUVDEUVD-2009-0361 No score
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
- Record
EUVD-2009-0361- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xprr-83m2-vv8v No score
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web...
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.
- Record
GHSA-xprr-83m2-vv8v- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score
MozillaFirefox-92.0-1.2 on GA media
These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10600-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
nssRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-toolsRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
nssRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
Show 154 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nss-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-toolsRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
nssRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-toolsRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
nssRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-toolsRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nssRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.0.6-1.el5 | 0:3.0.6-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.0.6-1.el5 | 0:3.0.6-1.el5 |
nssRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-toolsRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.0.6-1.el5 | 0:3.0.6-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.0.6-1.el5 | 0:3.0.6-1.el5 |
nssRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-toolsRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 661 CVEs |
before 92.0-1.2 | 92.0-1.2 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0357 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published February 4, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.56%, the 75th percentile. No source names a fixed version.
References
secunia.com/advisories/33808
vupen.com/english/advisories/2009/0313
lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html
redhat.com/archives/fedora-package-announce/2009-March/msg01077.html
secunia.com/advisories/33809
mandriva.com/security/advisories?name=MDVSA-2009:044
Show 194 moreShow less
rhn.redhat.com/errata/RHSA-2009-0256.html
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420
securitytracker.com/id?1021668
support.avaya.com/elmodocs2/security/ASA-2009-040.htm
bugzilla.mozilla.org/show_bug.cgi?id=380418
secunia.com/advisories/33831
ubuntu.com/usn/usn-717-2
secunia.com/advisories/33841
secunia.com/advisories/34527
secunia.com/advisories/33816
secunia.com/advisories/33846
mozilla.org/security/announce/2009/mfsa2009-05.html
secunia.com/advisories/33799
redhat.com/support/errata/RHSA-2009-0257.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9459
secunia.com/advisories/34462
securityfocus.com/bid/33598
redhat.com/archives/fedora-package-announce/2009-February/msg00240.html
ha.ckers.org/blog/20070511/bluehat-errata
secunia.com/advisories/33869
ubuntu.com/usn/usn-717-1
nvd.nist.gov/vuln/detail/CVE-2009-0357
github.com/advisories/GHSA-xprr-83m2-vv8v
access.redhat.com/errata/RHSA-2009:0256
redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=456849
bugzilla.redhat.com/show_bug.cgi?id=483139
bugzilla.redhat.com/show_bug.cgi?id=483141
bugzilla.redhat.com/show_bug.cgi?id=483142
bugzilla.redhat.com/show_bug.cgi?id=483143
bugzilla.redhat.com/show_bug.cgi?id=483144
bugzilla.redhat.com/show_bug.cgi?id=483145
bugzilla.redhat.com/show_bug.cgi?id=483150
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0256.json
access.redhat.com/security/cve/CVE-2009-0352
cve.org/CVERecord?id=CVE-2009-0352
nvd.nist.gov/vuln/detail/CVE-2009-0352
access.redhat.com/security/cve/CVE-2009-0353
cve.org/CVERecord?id=CVE-2009-0353
nvd.nist.gov/vuln/detail/CVE-2009-0353
access.redhat.com/security/cve/CVE-2009-0354
cve.org/CVERecord?id=CVE-2009-0354
nvd.nist.gov/vuln/detail/CVE-2009-0354
access.redhat.com/security/cve/CVE-2009-0355
cve.org/CVERecord?id=CVE-2009-0355
nvd.nist.gov/vuln/detail/CVE-2009-0355
access.redhat.com/security/cve/CVE-2009-0356
cve.org/CVERecord?id=CVE-2009-0356
nvd.nist.gov/vuln/detail/CVE-2009-0356
access.redhat.com/security/cve/CVE-2009-0357
cve.org/CVERecord?id=CVE-2009-0357
access.redhat.com/security/cve/CVE-2009-0358
cve.org/CVERecord?id=CVE-2009-0358
nvd.nist.gov/vuln/detail/CVE-2009-0358
access.redhat.com/errata/RHSA-2009:0257
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0257.json
suse.com/security/cve/CVE-2006-6077
suse.com/security/cve/CVE-2007-0008
suse.com/security/cve/CVE-2007-0009
suse.com/security/cve/CVE-2007-0078
suse.com/security/cve/CVE-2007-0079
suse.com/security/cve/CVE-2007-0775
suse.com/security/cve/CVE-2007-0776
suse.com/security/cve/CVE-2007-0777
suse.com/security/cve/CVE-2007-0780
suse.com/security/cve/CVE-2007-0800
suse.com/security/cve/CVE-2007-0981
suse.com/security/cve/CVE-2007-0995
suse.com/security/cve/CVE-2007-0996
suse.com/security/cve/CVE-2007-3089
suse.com/security/cve/CVE-2007-3285
suse.com/security/cve/CVE-2007-3656
suse.com/security/cve/CVE-2007-3670
suse.com/security/cve/CVE-2007-3734
suse.com/security/cve/CVE-2007-3735
suse.com/security/cve/CVE-2007-3736
suse.com/security/cve/CVE-2007-3737
suse.com/security/cve/CVE-2007-3738
suse.com/security/cve/CVE-2008-0412
suse.com/security/cve/CVE-2008-0414
suse.com/security/cve/CVE-2008-0415
suse.com/security/cve/CVE-2008-0417
suse.com/security/cve/CVE-2008-0418
suse.com/security/cve/CVE-2008-0419
suse.com/security/cve/CVE-2008-0591
suse.com/security/cve/CVE-2008-0592
suse.com/security/cve/CVE-2008-0593
suse.com/security/cve/CVE-2008-0594
suse.com/security/cve/CVE-2008-4063
suse.com/security/cve/CVE-2009-0352
suse.com/security/cve/CVE-2009-0354
suse.com/security/cve/CVE-2009-0355
suse.com/security/cve/CVE-2009-0356
suse.com/security/cve/CVE-2009-0357
suse.com/security/cve/CVE-2009-0358
suse.com/security/cve/CVE-2017-16541
suse.com/security/cve/CVE-2017-5373
suse.com/security/cve/CVE-2017-5374
suse.com/security/cve/CVE-2017-5375
suse.com/security/cve/CVE-2017-5376
suse.com/security/cve/CVE-2017-5377
suse.com/security/cve/CVE-2017-5378
suse.com/security/cve/CVE-2017-5379
suse.com/security/cve/CVE-2017-5380
suse.com/security/cve/CVE-2017-5381
suse.com/security/cve/CVE-2017-5382
suse.com/security/cve/CVE-2017-5383
suse.com/security/cve/CVE-2017-5384
suse.com/security/cve/CVE-2017-5385
suse.com/security/cve/CVE-2017-5386
suse.com/security/cve/CVE-2017-5387
suse.com/security/cve/CVE-2017-5388
suse.com/security/cve/CVE-2017-5389
suse.com/security/cve/CVE-2017-5390
suse.com/security/cve/CVE-2017-5391
suse.com/security/cve/CVE-2017-5392
suse.com/security/cve/CVE-2017-5393
suse.com/security/cve/CVE-2017-5394
suse.com/security/cve/CVE-2017-5395
suse.com/security/cve/CVE-2017-5396
suse.com/security/cve/CVE-2017-5398
suse.com/security/cve/CVE-2017-5399
suse.com/security/cve/CVE-2017-5400
suse.com/security/cve/CVE-2017-5401
suse.com/security/cve/CVE-2017-5402
suse.com/security/cve/CVE-2017-5403
suse.com/security/cve/CVE-2017-5404
suse.com/security/cve/CVE-2017-5405
suse.com/security/cve/CVE-2017-5406
suse.com/security/cve/CVE-2017-5407
suse.com/security/cve/CVE-2017-5408
suse.com/security/cve/CVE-2017-5410
suse.com/security/cve/CVE-2017-5412
suse.com/security/cve/CVE-2017-5413
suse.com/security/cve/CVE-2017-5414
suse.com/security/cve/CVE-2017-5415
suse.com/security/cve/CVE-2017-5416
suse.com/security/cve/CVE-2017-5417
suse.com/security/cve/CVE-2017-5418
suse.com/security/cve/CVE-2017-5419
suse.com/security/cve/CVE-2017-5420
suse.com/security/cve/CVE-2017-5421
suse.com/security/cve/CVE-2017-5422
suse.com/security/cve/CVE-2017-5426
suse.com/security/cve/CVE-2017-5427
suse.com/security/cve/CVE-2017-5428
suse.com/security/cve/CVE-2017-5429
suse.com/security/cve/CVE-2017-5430
suse.com/security/cve/CVE-2017-5432
suse.com/security/cve/CVE-2017-5433
suse.com/security/cve/CVE-2017-5434
suse.com/security/cve/CVE-2017-5435
suse.com/security/cve/CVE-2017-5436
suse.com/security/cve/CVE-2017-5437
suse.com/security/cve/CVE-2017-5438
suse.com/security/cve/CVE-2017-5439
suse.com/security/cve/CVE-2017-5440
suse.com/security/cve/CVE-2017-5441
suse.com/security/cve/CVE-2017-5442
suse.com/security/cve/CVE-2017-5443
suse.com/security/cve/CVE-2017-5444
suse.com/security/cve/CVE-2017-5445
suse.com/security/cve/CVE-2017-5446
suse.com/security/cve/CVE-2017-5447
suse.com/security/cve/CVE-2017-5448
suse.com/security/cve/CVE-2017-5449
suse.com/security/cve/CVE-2017-5451
suse.com/security/cve/CVE-2017-5453
suse.com/security/cve/CVE-2017-5454
suse.com/security/cve/CVE-2017-5455
suse.com/security/cve/CVE-2017-5456
suse.com/security/cve/CVE-2017-5458
suse.com/security/cve/CVE-2017-5459
suse.com/security/cve/CVE-2017-5460
suse.com/security/cve/CVE-2017-5461
suse.com/security/cve/CVE-2017-5462
suse.com/security/cve/CVE-2017-5464
suse.com/security/cve/CVE-2017-5465
suse.com/security/cve/CVE-2017-5466
suse.com/security/cve/CVE-2017-5467
suse.com/security/cve/CVE-2017-5468
suse.com/security/cve/CVE-2017-5469
suse.com/security/cve/CVE-2017-7753
suse.com/security/cve/CVE-2017-7779
suse.com/security/cve/CVE-2017-7780
suse.com/security/cve/CVE-2017-7781
suse.com/security/cve/CVE-2017-7782
suse.com/security/cve/CVE-2017-7783
suse.com/security/cve/CVE-2017-7784
suse.com/security/cve/CVE-2017-7785
suse.com/security/cve/CVE-2017-7786
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
Left out here: 1,725 references. The JSON record has them.