CVE-2015-7208
CVE-2015-7208
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.
EPSS 2,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
firefox Ubuntu:14.04:LTS
- Versiones
- 24.0+build1-0ubuntu1
- 25.0+build3-0ubuntu0.13.10.1
- 28.0~b2+build1-0ubuntu2
- 28.0+build1-0ubuntu1
- 28.0+build2-0ubuntu1
- 28.0+build2-0ubuntu2
- 29.0+build1-0ubuntu0.14.04.2
- 30.0+build1-0ubuntu0.14.04.3
- 31.0+build1-0ubuntu0.14.04.1
- 32.0+build1-0ubuntu0.14.04.1
- 32.0.3+build1-0ubuntu0.14.04.1
- 33.0+build2-0ubuntu0.14.04.1
- 34.0+build2-0ubuntu0.14.04.1
- 35.0+build3-0ubuntu0.14.04.2
- 35.0.1+build1-0ubuntu0.14.04.1
- 36.0+build2-0ubuntu0.14.04.4
- 36.0.1+build2-0ubuntu0.14.04.1
- 36.0.4+build1-0ubuntu0.14.04.1
- 37.0+build2-0ubuntu0.14.04.1
- 37.0.1+build1-0ubuntu0.14.04.1
- 37.0.2+build1-0ubuntu0.14.04.1
- 38.0+build3-0ubuntu0.14.04.1
- 39.0+build5-0ubuntu0.14.04.1
- 39.0.3+build2-0ubuntu0.14.04.1
- 40.0+build4-0ubuntu0.14.04.1
- 40.0+build4-0ubuntu0.14.04.4
- 40.0.3+build1-0ubuntu0.14.04.1
- 41.0+build3-0ubuntu0.14.04.1
- 41.0.1+build2-0ubuntu0.14.04.1
- 41.0.2+build2-0ubuntu0.14.04.1
- 42.0+build2-0ubuntu0.14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 43.0+build1-0ubuntu0.14.04.1
Actualiza a 43.0+build1-0ubuntu0.14.04.1
Fuentes originales
- https://bugzilla.mozilla.org/show_bug.cgi?id=1191423
- https://security.gentoo.org/glsa/201512-10
- http://www.securitytracker.com/id/1034825
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-04.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.mozilla.org/security/announce/2015/mfsa2015-137.html
- http://www.securityfocus.com/bid/79280
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://www.securitytracker.com/id/1034426
- https://nvd.nist.gov/vuln/detail/CVE-2015-7208