CVE-2015-7208

Description (CNA)

Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1191423
• https://security.gentoo.org/glsa/201512-10
• http://www.securitytracker.com/id/1034825
• http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
• http://www.mozilla.org/security/announce/2016/mfsa2016-04.html
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
• http://www.ubuntu.com/usn/USN-2833-1
• http://www.mozilla.org/security/announce/2015/mfsa2015-137.html
• http://www.securityfocus.com/bid/79280
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
• http://www.securitytracker.com/id/1034426

ADP enrichment