Vulnérabilité · NVD

CVE-2011-2362

N/A Publié le 2011-06-30

EN Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers.

EPSS 1.76% au-dessus de la médiane percentile 75.9%

Apps suivies liées à cette CVE

Pour chaque app : la plage affectée, la version qui corrige, et où en est l'app suivie aujourd'hui.

Mozilla Thunderbird Windows winget:Mozilla.Thunderbird

Affecté — Corrigé — Dernière suivie 153.0.2 indéterminé

Configurations CPE vulnérables (84)

Vendor	Produit	Plateforme	Versions	CPE 2.3 URI
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	≤3.1.10	cpe:2.3:a:mozilla:thunderbird::::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:beta2::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.9:::::::*

Voir sur NVD ↗ Advisory · www.mozilla.org