← Back

CVE-2009-3984

nvd nist
Published: Dec 17, 2009Modified: Apr 23, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.

Affected (157)

3 products
Firefox
Seamonkey
Thunderbird
Configuration A
157 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Up to 3.0.15
Version 0.10.1
Version 0.10
Version 0.1
Version 0.2
Version 0.3
Version 0.4
Version 0.5
Version 0.6.1
Version 0.6
Version 0.7.1
Version 0.7
Version 0.8
Version 0.9.1
Version 0.9.2
Version 0.9.3
Version 0.9
Version 0.9 rc
Version 1.0.1
Version 1.0.2
Version 1.0.3
Version 1.0.4
Version 1.0.5
Version 1.0.6
Version 1.0.7
Version 1.0.8
Version 1.0
Version 1.0 preview_release
Version 1.4.1
Version 1.5.0.10
Version 1.5.0.11
Version 1.5.0.12
Version 1.5.0.1
Version 1.5.0.2
Version 1.5.0.3
Version 1.5.0.4
Version 1.5.0.5
Version 1.5.0.6
Version 1.5.0.7
Version 1.5.0.8
Version 1.5.0.9
Version 1.5.1
Version 1.5.2
Version 1.5.3
Version 1.5.4
Version 1.5.5
Version 1.5.6
Version 1.5.7
Version 1.5.8
Version 1.5
Version 1.5 beta1
Version 1.5 beta2
Version 1.8
Version 2.0.0.10
Version 2.0.0.11
Version 2.0.0.12
Version 2.0.0.13
Version 2.0.0.14
Version 2.0.0.15
Version 2.0.0.16
Version 2.0.0.17
Version 2.0.0.18
Version 2.0.0.19
Version 2.0.0.1
Version 2.0.0.20
Version 2.0.0.21
Version 2.0.0.2
Version 2.0.0.3
Version 2.0.0.4
Version 2.0.0.5
Version 2.0.0.6
Version 2.0.0.7
Version 2.0.0.8
Version 2.0.0.9
Version 2.0
Version 2.0 beta1
Version 2.0 beta_1
Version 2.0 rc2
Version 2.0 rc3
Version 2.0_.10
Version 2.0_.1
Version 2.0_.4
Version 2.0_.5
Version 2.0_.6
Version 2.0_.7
Version 2.0_.9
Version 2.0_8
Version 3.0.10
Version 3.0.11
Version 3.0.12
Version 3.0.13
Version 3.0.14
Version 3.0.1
Version 3.0.2
Version 3.0.3
Version 3.0.4
Version 3.0.5
Version 3.0.6
Version 3.0.7
Version 3.0.8
Version 3.0.9
Version 3.0
Version 3.0 alpha
Version 3.0 beta2
Version 3.0 beta5
Version 3.5.1
Version 3.5.2
Version 3.5.3
Version 3.5.4
Version 3.5.5
Mozilla
Up to 2.0
Version 1.0.1
Version 1.0.2
Version 1.0.3
Version 1.0.4
Version 1.0.5
Version 1.0.6
Version 1.0.7
Version 1.0.8
Version 1.0.99
Version 1.0.9
Version 1.0
Version 1.0 alpha
Version 1.0 beta
Version 1.1.10
Version 1.1.11
Version 1.1.12
Version 1.1.13
Version 1.1.14
Version 1.1.15
Version 1.1.16
Version 1.1.17
Version 1.1.1
Version 1.1.2
Version 1.1.3
Version 1.1.4
Version 1.1.5
Version 1.1.6
Version 1.1.7
Version 1.1.8
Version 1.1.9
Version 1.1
Version 1.1 alpha
Version 1.1 beta
Version 1.5.0.10
Version 1.5.0.8
Version 1.5.0.9
Version 2.0
Version 2.0 alpha_1
Version 2.0 alpha_2
Version 2.0 alpha_3
Version 2.0 beta_1
Version 2.0 beta_2
Version 2.0 rc1
Version 2.0a1
Version 2.0a1pre
All versions

References (54)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.