CVE Vulnerabilities

CVE-2011-2362

Published: Jun 30, 2011 | Modified: Sep 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers.

Affected Software

Name Vendor Start Version End Version
Seamonkey Mozilla 2.0.10 2.0.10
Seamonkey Mozilla 1.1.10 1.1.10
Seamonkey Mozilla 1.0.3 1.0.3
Seamonkey Mozilla 2.0.13 2.0.13
Seamonkey Mozilla 1.1.8 1.1.8
Seamonkey Mozilla 1.0.1 1.0.1
Seamonkey Mozilla 1.1.7 1.1.7
Seamonkey Mozilla 1.5.0.10 1.5.0.10
Seamonkey Mozilla 1.0.6 1.0.6
Seamonkey Mozilla 1.0.9 1.0.9
Seamonkey Mozilla 1.1.3 1.1.3
Seamonkey Mozilla 2.0.4 2.0.4
Seamonkey Mozilla 1.0 1.0
Seamonkey Mozilla 2.0.3 2.0.3
Seamonkey Mozilla 2.0.2 2.0.2
Seamonkey Mozilla 1.1.17 1.1.17
Seamonkey Mozilla 2.0 2.0
Seamonkey Mozilla 1.1.5 1.1.5
Seamonkey Mozilla 2.0.8 2.0.8
Seamonkey Mozilla 1.0.7 1.0.7
Seamonkey Mozilla 1.0 1.0
Seamonkey Mozilla 1.1 1.1
Seamonkey Mozilla 2.0 2.0
Seamonkey Mozilla 2.0 2.0
Seamonkey Mozilla 1.0 1.0
Seamonkey Mozilla 1.1.12 1.1.12
Seamonkey Mozilla 2.0.12 2.0.12
Seamonkey Mozilla 1.1 1.1
Seamonkey Mozilla 1.1.14 1.1.14
Seamonkey Mozilla 2.0.11 2.0.11
Seamonkey Mozilla 1.1.2 1.1.2
Seamonkey Mozilla 2.0 2.0
Seamonkey Mozilla 1.0.2 1.0.2
Seamonkey Mozilla 1.0.8 1.0.8
Seamonkey Mozilla 1.1.11 1.1.11
Seamonkey Mozilla 2.0 2.0
Seamonkey Mozilla 1.5.0.9 1.5.0.9
Seamonkey Mozilla 1.1 1.1
Seamonkey Mozilla 1.1.1 1.1.1
Seamonkey Mozilla 2.0.9 2.0.9
Seamonkey Mozilla 1.5.0.8 1.5.0.8
Seamonkey Mozilla 2.0.1 2.0.1
Seamonkey Mozilla 1.0.5 1.0.5
Seamonkey Mozilla 1.1.15 1.1.15
Seamonkey Mozilla 2.0.14 2.0.14
Seamonkey Mozilla 1.1.6 1.1.6
Seamonkey Mozilla 2.0.7 2.0.7
Seamonkey Mozilla 1.1.16 1.1.16
Seamonkey Mozilla 2.0 2.0
Seamonkey Mozilla 1.1.19 1.1.19
Seamonkey Mozilla 2.0.5 2.0.5
Seamonkey Mozilla 2.0 2.0
Seamonkey Mozilla 1.0.4 1.0.4
Seamonkey Mozilla 1.1.9 1.1.9
Seamonkey Mozilla 1.1.13 1.1.13
Seamonkey Mozilla 1.1.18 1.1.18
Seamonkey Mozilla 2.0.6 2.0.6
Seamonkey Mozilla 2.0 2.0
Seamonkey Mozilla 1.1.4 1.1.4

References