Published: 16/12/2015 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Mozilla Firefox prior to 43.0 stores cookies containing vertical tab characters, which allows remote malicious users to obtain sensitive information by reading HTTP Cookie headers.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox
fedoraproject fedora 23
fedoraproject fedora 22
opensuse leap 42.1
opensuse opensuse 13.2
opensuse opensuse 13.1

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Mozilla Firefox before 430 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers ...

Mozilla Foundation Security Advisory 2016-04 Firefox allows for control characters to be set in cookie names Announced January 26, 2016 Reporter musicDespiteEverything, Nicholas Hurley Impact Moderate Products Firefox F ...

Mozilla Foundation Security Advisory 2015-137 Firefox allows for control characters to be set in cookies Announced December 15, 2015 Reporter musicDespiteEverything Impact Moderate Products Firefox Fixed in ...

CWE-200 http://www.mozilla.org/security/announce/2015/mfsa2015-137.html https://bugzilla.mozilla.org/show_bug.cgi?id=1191423 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html http://www.mozilla.org/security/announce/2016/mfsa2016-04.html http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html http://www.securityfocus.com/bid/79280 http://www.securitytracker.com/id/1034426 https://security.gentoo.org/glsa/201512-10 http://www.ubuntu.com/usn/USN-2833-1 http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html http://www.securitytracker.com/id/1034825 https://usn.ubuntu.com/2833-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-7208

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-7208

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect