Bugzilla 2.14 up to and including 2.22.7; 3.0.x, 3.1.x, and 3.2.x prior to 3.2.10; 3.4.x prior to 3.4.10; 3.6.x prior to 3.6.4; and 4.0.x prior to 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote malicious users to obtain access to arbitrary accounts via unspecified vectors, related to an insufficient number of calls to the srand function.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mozilla bugzilla 2.14.5 |
||
mozilla bugzilla 2.16 |
||
mozilla bugzilla 2.16.5 |
||
mozilla bugzilla 2.16.6 |
||
mozilla bugzilla 2.17.4 |
||
mozilla bugzilla 2.17.5 |
||
mozilla bugzilla 2.18.3 |
||
mozilla bugzilla 2.18.4 |
||
mozilla bugzilla 2.19.2 |
||
mozilla bugzilla 2.19.3 |
||
mozilla bugzilla 2.20 |
||
mozilla bugzilla 2.21 |
||
mozilla bugzilla 2.21.1 |
||
mozilla bugzilla 2.22.5 |
||
mozilla bugzilla 2.22.6 |
||
mozilla bugzilla 2.14.3 |
||
mozilla bugzilla 2.14.4 |
||
mozilla bugzilla 2.16.3 |
||
mozilla bugzilla 2.16.4 |
||
mozilla bugzilla 2.17.1 |
||
mozilla bugzilla 2.17.3 |
||
mozilla bugzilla 2.18.1 |
||
mozilla bugzilla 2.18.2 |
||
mozilla bugzilla 2.19 |
||
mozilla bugzilla 2.19.1 |
||
mozilla bugzilla 2.22.3 |
||
mozilla bugzilla 2.22.4 |
||
mozilla bugzilla 2.20.7 |
||
mozilla bugzilla 2.18.6\\+ |
||
mozilla bugzilla 2.14 |
||
mozilla bugzilla 2.16.1 |
||
mozilla bugzilla 2.16.10 |
||
mozilla bugzilla 2.16.7 |
||
mozilla bugzilla 2.16.8 |
||
mozilla bugzilla 2.16.9 |
||
mozilla bugzilla 2.17.6 |
||
mozilla bugzilla 2.18.5 |
||
mozilla bugzilla 2.18 |
||
mozilla bugzilla 2.20.1 |
||
mozilla bugzilla 2.20.2 |
||
mozilla bugzilla 2.21.2 |
||
mozilla bugzilla 2.22 |
||
mozilla bugzilla 2.18.6 |
||
mozilla bugzilla 2.14.1 |
||
mozilla bugzilla 2.14.2 |
||
mozilla bugzilla 2.16.11 |
||
mozilla bugzilla 2.16.2 |
||
mozilla bugzilla 2.17 |
||
mozilla bugzilla 2.17.7 |
||
mozilla bugzilla 2.20.3 |
||
mozilla bugzilla 2.20.4 |
||
mozilla bugzilla 2.22.1 |
||
mozilla bugzilla 2.22.2 |
||
mozilla bugzilla 2.20.5 |
||
mozilla bugzilla 2.20.6 |
||
mozilla bugzilla 3.0 |
||
mozilla bugzilla 3.0.2 |
||
mozilla bugzilla 3.0.0 |
||
mozilla bugzilla 3.0.1 |
||
mozilla bugzilla 3.0.8 |
||
mozilla bugzilla 3.0.11 |
||
mozilla bugzilla 3.0.7 |
||
mozilla bugzilla 3.0.4 |
||
mozilla bugzilla 3.0.3 |
||
mozilla bugzilla 3.0.10 |
||
mozilla bugzilla 3.0.9 |
||
mozilla bugzilla 3.0.6 |
||
mozilla bugzilla 3.0.5 |
||
mozilla bugzilla 3.1.1 |
||
mozilla bugzilla 3.1.0 |
||
mozilla bugzilla 3.1.2 |
||
mozilla bugzilla 3.1.4 |
||
mozilla bugzilla 3.1.3 |
||
mozilla bugzilla 3.2.1 |
||
mozilla bugzilla 3.2.6 |
||
mozilla bugzilla 3.2 |
||
mozilla bugzilla 3.2.7 |
||
mozilla bugzilla 3.2.9 |
||
mozilla bugzilla 3.2.2 |
||
mozilla bugzilla 3.2.8 |
||
mozilla bugzilla 3.2.5 |
||
mozilla bugzilla 3.2.4 |
||
mozilla bugzilla 3.2.3 |
||
mozilla bugzilla 3.4.6 |
||
mozilla bugzilla 3.4.1 |
||
mozilla bugzilla 3.4.9 |
||
mozilla bugzilla 3.4 |
||
mozilla bugzilla 3.4.5 |
||
mozilla bugzilla 3.4.7 |
||
mozilla bugzilla 3.4.2 |
||
mozilla bugzilla 3.4.3 |
||
mozilla bugzilla 3.4.4 |
||
mozilla bugzilla 3.4.8 |
||
mozilla bugzilla 3.6.2 |
||
mozilla bugzilla 3.6.1 |
||
mozilla bugzilla 3.6.0 |
||
mozilla bugzilla 3.6.3 |
||
mozilla bugzilla 3.6 |
||
mozilla bugzilla 4.0 |
Vulmon