GCVE - cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*

part: a version: 2.0a1 update: *

Vendor	Mozilla (`be1b0d4e-21a7-5a25-9982-bbda6ef43ec1`)
Product	Seamonkey (`9b67c4f8-e83e-55c8-8c3d-4a52e7d74102`)
Edition	pre
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/seamonkey-project/seamonkey-2.53-comm`	purl2cpe	2026-06-01 10:17:53.388215
`pkg:mozilla/seamonkey`	purl2cpe	2026-06-01 10:17:53.388217
`pkg:rpm/fedora/seamonkey`	purl2cpe	2026-06-01 10:17:53.388219

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-3671`	vulnerable	2026-06-03 14:31:21.558608	Details available Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element. Published: 2012-06-18T19:00:00.000Z Updated: 2024-09-16T20:12:45.339Z Open on db.gcve.eu Reference links http://www.mozilla.org/security/announce/2012/mfsa2012-41.html https://bugzilla.mozilla.org/show_bug.cgi?id=739343	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3665`	vulnerable	2026-06-03 14:31:21.403042	Details available Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an Ogg VIDEO element that is not properly handled after scaling. Published: 2011-12-21T02:00:00.000Z Updated: 2024-08-06T23:46:03.039Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 https://bugzilla.mozilla.org/show_bug.cgi?id=701259 https://exchange.xforce.ibmcloud.com/vulnerabilities/71913 http://secunia.com/advisories/47334 http://www.securitytracker.com/id?1026447	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3664`	vulnerable	2026-06-03 14:31:21.398822	Details available Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) or possibly have unspecified other impact via a crafted web site. Published: 2011-12-21T02:00:00.000Z Updated: 2024-08-06T23:46:01.356Z Open on db.gcve.eu Reference links https://bugzilla.mozilla.org/show_bug.cgi?id=649079 http://secunia.com/advisories/47334 http://www.securitytracker.com/id?1026447 http://www.securitytracker.com/id?1026446 http://www.mozilla.org/security/announce/2011/mfsa2011-57.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3661`	vulnerable	2026-06-03 14:31:21.361089	Details available YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript. Published: 2011-12-21T02:00:00.000Z Updated: 2024-08-06T23:46:02.571Z Open on db.gcve.eu Reference links https://bugzilla.mozilla.org/show_bug.cgi?id=691299 http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 http://secunia.com/advisories/47334 http://www.securitytracker.com/id?1026447 http://www.securitytracker.com/id?1026446	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3660`	vulnerable	2026-06-03 14:31:21.354804	Details available Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors. Published: 2011-12-21T02:00:00.000Z Updated: 2024-08-06T23:46:01.330Z Open on db.gcve.eu Reference links https://bugzilla.mozilla.org/show_bug.cgi?id=685321 http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 https://bugzilla.mozilla.org/show_bug.cgi?id=562442 https://bugzilla.mozilla.org/show_bug.cgi?id=691873 https://bugzilla.mozilla.org/show_bug.cgi?id=685186	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3232`	vulnerable	2026-06-03 14:31:13.040840	Details available YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:29:56.165Z Open on db.gcve.eu Reference links https://bugs.webkit.org/show_bug.cgi?id=61585 http://support.apple.com/kb/HT4981 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://www.mozilla.org/security/announce/2011/mfsa2011-42.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3005`	vulnerable	2026-06-03 14:31:11.824397	Details available Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:22:27.157Z Open on db.gcve.eu Reference links http://www.mozilla.org/security/announce/2011/mfsa2011-44.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14352 http://secunia.com/advisories/46315 http://secunia.com/advisories/49055 http://www.mandriva.com/security/advisories?name=MDVSA-2011:141	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3004`	vulnerable	2026-06-03 14:31:11.820245	Details available The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:22:26.653Z Open on db.gcve.eu Reference links https://bugzilla.mozilla.org/show_bug.cgi?id=653926 http://www.mandriva.com/security/advisories?name=MDVSA-2011:141 http://www.mozilla.org/security/announce/2011/mfsa2011-43.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14121	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3001`	vulnerable	2026-06-03 14:31:11.817422	Details available Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:22:27.276Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 http://secunia.com/advisories/46315 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14442 http://www.mozilla.org/security/announce/2011/mfsa2011-40.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:141	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3000`	vulnerable	2026-06-03 14:31:11.813166	Details available Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:22:26.691Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 https://bugzilla.mozilla.org/show_bug.cgi?id=655389 http://www.debian.org/security/2011/dsa-2312 http://secunia.com/advisories/46315 http://www.redhat.com/support/errata/RHSA-2011-1341.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2999`	vulnerable	2026-06-03 14:31:11.808294	Details available Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the name of a frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, a different vulnerability than CVE-2010-0170. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:22:26.687Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 https://bugzilla.mozilla.org/show_bug.cgi?id=665548 http://www.debian.org/security/2011/dsa-2312 http://secunia.com/advisories/46315 http://www.mozilla.org/security/announce/2011/mfsa2011-38.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2997`	vulnerable	2026-06-03 14:31:11.776218	Details available Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:22:26.134Z Open on db.gcve.eu Reference links https://bugzilla.mozilla.org/show_bug.cgi?id=667507 https://bugzilla.mozilla.org/show_bug.cgi?id=658864 http://www.mozilla.org/security/announce/2011/mfsa2011-36.html https://bugzilla.mozilla.org/show_bug.cgi?id=673757 https://bugzilla.mozilla.org/show_bug.cgi?id=678818	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2995`	vulnerable	2026-06-03 14:31:11.563442	Details available Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:22:26.678Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 https://bugzilla.mozilla.org/show_bug.cgi?id=660453 http://www.mozilla.org/security/announce/2011/mfsa2011-36.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13957 http://www.debian.org/security/2011/dsa-2312	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2372`	vulnerable	2026-06-03 14:31:06.933931	Details available Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site. Published: 2011-09-29T00:00:00.000Z Updated: 2024-08-06T23:00:33.547Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13854 https://bugzilla.mozilla.org/show_bug.cgi?id=657462 http://www.debian.org/security/2011/dsa-2312 http://secunia.com/advisories/46315	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5074`	vulnerable	2026-06-03 14:30:45.049866	Details available The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets (CSS) token sequences, which makes it easier for remote attackers to obtain sensitive information about visited web pages via a timing attack. Published: 2011-12-07T19:00:00.000Z Updated: 2024-08-07T04:09:38.583Z Open on db.gcve.eu Reference links http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14456	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1125`	vulnerable	2026-06-03 14:30:12.572660	Details available The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method. Published: 2010-03-26T20:00:00.000Z Updated: 2024-08-07T01:14:06.319Z Open on db.gcve.eu Reference links http://secunia.com/advisories/40481 http://ubuntu.com/usn/usn-930-1 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html http://www.securitytracker.com/id?1024138 http://www.vupen.com/english/advisories/2010/1640	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3987`	vulnerable	2026-06-03 14:29:54.849433	Details available The GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, generates different exception messages depending on whether the referenced COM object is listed in the registry, which allows remote attackers to obtain potentially sensitive information about installed software by making multiple calls that specify the ProgID values of different COM objects. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.904Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37699 https://bugzilla.mozilla.org/show_bug.cgi?id=503451 http://www.vupen.com/english/advisories/2009/3547 http://secunia.com/advisories/37785 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7958	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3986`	vulnerable	2026-06-03 14:29:54.845678	Details available Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.896Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37704 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8489 http://secunia.com/advisories/37699 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11568 http://www.vupen.com/english/advisories/2009/3547	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3985`	vulnerable	2026-06-03 14:29:54.841707	Details available Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.919Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1023343 http://secunia.com/advisories/37704 http://secunia.com/advisories/37699 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8480 http://securitytracker.com/id?1023342	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3984`	vulnerable	2026-06-03 14:29:54.837337	Details available Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.789Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1023343 http://secunia.com/advisories/37704 http://secunia.com/advisories/37699 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8379 http://securitytracker.com/id?1023342	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3983`	vulnerable	2026-06-03 14:29:54.833036	Details available Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.871Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37704 http://secunia.com/advisories/37699 http://secunia.com/advisories/39001 http://www.vupen.com/english/advisories/2009/3547 http://secunia.com/advisories/37703	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3982`	vulnerable	2026-06-03 14:29:54.828792	Details available Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.930Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37699 https://bugzilla.mozilla.org/show_bug.cgi?id=513981 http://secunia.com/advisories/37783 http://www.vupen.com/english/advisories/2009/3558 http://www.vupen.com/english/advisories/2009/3547	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3981`	vulnerable	2026-06-03 14:29:54.826970	Details available Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.930Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37704 http://secunia.com/advisories/37699 https://bugzilla.mozilla.org/show_bug.cgi?id=468771 http://www.vupen.com/english/advisories/2009/3547 http://secunia.com/advisories/37881	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3980`	vulnerable	2026-06-03 14:29:54.810901	Details available Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.932Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37699 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8503 http://www.vupen.com/english/advisories/2009/3547 http://secunia.com/advisories/37881 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3979`	vulnerable	2026-06-03 14:29:54.809145	Details available Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:45:50.879Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37704 http://www.redhat.com/support/errata/RHSA-2010-0153.html https://bugzilla.mozilla.org/show_bug.cgi?id=293347 http://secunia.com/advisories/37699 https://bugzilla.redhat.com/show_bug.cgi?id=546694	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3389`	vulnerable	2026-06-03 14:29:50.773460	Details available Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions. Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:22:24.811Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39317 http://secunia.com/advisories/37699 http://www.mozilla.org/security/announce/2009/mfsa2009-67.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7967 http://www.vupen.com/english/advisories/2009/3547	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3388`	vulnerable	2026-06-03 14:29:50.771249	Details available liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to "memory safety issues." Published: 2009-12-17T17:00:00.000Z Updated: 2024-08-07T06:22:24.584Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37699 https://bugzilla.mozilla.org/show_bug.cgi?id=504843 http://securitytracker.com/id?1023335 http://securitytracker.com/id?1023336 http://www.vupen.com/english/advisories/2009/3547	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2437`	vulnerable	2026-06-03 14:26:24.177774	Details available The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. Published: 2011-12-07T19:00:00.000Z Updated: 2024-09-17T03:53:56.889Z Open on db.gcve.eu Reference links http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ http://w2spconf.com/2010/papers/p26.pdf http://bugzilla.mozilla.org/show_bug.cgi?id=147777 https://developer.mozilla.org/en/CSS/Privacy_and_the_:visited_selector	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2436`	vulnerable	2026-06-03 14:26:24.173091	Details available The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264. Published: 2011-12-07T19:00:00.000Z Updated: 2024-08-08T04:06:54.689Z Open on db.gcve.eu Reference links http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ http://w2spconf.com/2010/papers/p26.pdf http://bugzilla.mozilla.org/show_bug.cgi?id=147777 https://developer.mozilla.org/en/CSS/Privacy_and_the_:visited_selector https://exchange.xforce.ibmcloud.com/vulnerabilities/71816	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Seamonkey

PURL mappings

Vulnerability references

Contribute