CVE-2007-4879

Mozilla Firefox <2.0.0.13 & SeaMonkey <1.1.9 - Info Disclosure

Title source: llm
STIX 2.1

Description

Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install TLS client certificates with minimal user interaction, and automatically sends these certificates when requested, which makes it easier for remote web sites to track user activities across domains by requesting the TLS client certificates from other domains.

References (28)

Core 28
Core References
Various Sources x_refsource_misc
http://0x90.eu/ff_tls_poc.html
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/490196/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29541
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29539
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019704
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30620
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29560
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1532
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30327
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-592-1
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29616
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29645
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1793/references
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29558
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29526
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA08-087A.html
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=395399
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28448
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1534
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29547
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0998/references
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1535
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:080

Scores

EPSS 0.0127
EPSS Percentile 66.6%

Details

Status published
Products (46)
mozilla/firefox 0.1
mozilla/firefox 0.2
mozilla/firefox 0.3
mozilla/firefox 0.4
mozilla/firefox 0.5
mozilla/firefox 0.6
mozilla/firefox 0.6.1
mozilla/firefox 0.7
mozilla/firefox 0.7.1
mozilla/firefox 0.8
... and 36 more
Published Sep 13, 2007
Tracked Since Feb 18, 2026