CVE-2011-2362

Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only…

published June 30, 2011

CVSS
—
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01777 · 77.9th percentile
Published
2011-06-30T16:00Z
EPSS history
Timeline
  • 30 JUN 16:00Z
    Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only…
    cvelistv5